nerdexam
CompTIA

PT0-001 · Question #168

When conducting reconnaissance against a target, which of the following should be used to avoid directory communicating with the target?

The correct answer is B. Maltego community edition. Passive reconnaissance avoids direct contact with the target by using OSINT tools like Maltego that query only public third-party data sources.

Reconnaissance and enumeration

Question

When conducting reconnaissance against a target, which of the following should be used to avoid directory communicating with the target?

Options

  • ANmap tool
  • BMaltego community edition
  • CNessus vulnerability scanner
  • DOpenVAS
  • EMelasploit

How the community answered

(45 responses)
  • A
    4% (2)
  • B
    93% (42)
  • D
    2% (1)

Why each option

Passive reconnaissance avoids direct contact with the target by using OSINT tools like Maltego that query only public third-party data sources.

ANmap tool

Nmap sends packets directly to target hosts to discover open ports and services, which constitutes active, direct communication with the target.

BMaltego community editionCorrect

Maltego Community Edition is an OSINT and link-analysis tool that gathers information exclusively from publicly available sources such as DNS records, WHOIS data, social networks, and search engines. Because all queries go to third-party data providers rather than the target's infrastructure directly, there is no direct communication with the target during reconnaissance.

CNessus vulnerability scanner

Nessus actively connects to and probes the target system for vulnerabilities, making it an active scanner that communicates directly with the target.

DOpenVAS

OpenVAS is an active vulnerability scanner that initiates direct network connections to the target to test for security weaknesses.

EMelasploit

Metasploit is an exploitation framework that interacts directly with target systems to deliver and execute payloads.

Concept tested: Passive OSINT reconnaissance without direct target contact

Source: https://docs.maltego.com/support/solutions/articles/15000008583-what-is-maltego

Topics

#passive reconnaissance#OSINT#Maltego#reconnaissance tools

Community Discussion

No community discussion yet for this question.

Full PT0-001 Practice