Jane has recently implemented a new network design at her organization and wishes to passively identify security issues with the new network. Which of the following should Jane perform?

A vulnerability assessment uses automated scanning tools to identify known vulnerabilities, misconfigurations, and weaknesses in a network or system without actively exploiting them. Because it is non-exploitative and observational in nature, it is classified as a passive identification technique. This distinguishes it from penetration testing, which actively attempts to exploit discovered weaknesses.

Black box testing is a form of penetration testing where the tester has no prior knowledge of the environment and actively attempts exploitation, which is not passive.

White box testing is a penetration testing approach where the tester has full knowledge of the environment and actively tests it, which is also not passive.

Penetration testing actively exploits vulnerabilities to demonstrate their impact, making it an active rather than passive security assessment technique.