PT0-001 · Question #168
When conducting reconnaissance against a target, which of the following should be used to avoid directory communicating with the target?
The correct answer is B. Maltego community edition. Passive reconnaissance avoids direct contact with the target by using OSINT tools like Maltego that query only public third-party data sources.
Question
When conducting reconnaissance against a target, which of the following should be used to avoid directory communicating with the target?
Options
- ANmap tool
- BMaltego community edition
- CNessus vulnerability scanner
- DOpenVAS
- EMelasploit
How the community answered
(45 responses)- A4% (2)
- B93% (42)
- D2% (1)
Why each option
Passive reconnaissance avoids direct contact with the target by using OSINT tools like Maltego that query only public third-party data sources.
Nmap sends packets directly to target hosts to discover open ports and services, which constitutes active, direct communication with the target.
Maltego Community Edition is an OSINT and link-analysis tool that gathers information exclusively from publicly available sources such as DNS records, WHOIS data, social networks, and search engines. Because all queries go to third-party data providers rather than the target's infrastructure directly, there is no direct communication with the target during reconnaissance.
Nessus actively connects to and probes the target system for vulnerabilities, making it an active scanner that communicates directly with the target.
OpenVAS is an active vulnerability scanner that initiates direct network connections to the target to test for security weaknesses.
Metasploit is an exploitation framework that interacts directly with target systems to deliver and execute payloads.
Concept tested: Passive OSINT reconnaissance without direct target contact
Source: https://docs.maltego.com/support/solutions/articles/15000008583-what-is-maltego
Topics
Community Discussion
No community discussion yet for this question.