100-160 Question 184
Select 3As a cybersecurity technician, you are tasked to assess the security posture of a client's web application without actively engaging with the system to avoid triggering alarms or violating access policies. Which of the following activities would be considered passive reconnaissance in this scenario?
- A
Scanning open ports on the client's web server using Nmap
- B
Inspecting publicly available DNS records for the client's domain
- C
Reviewing the client's website for metadata and public information
- D
Using an automated vulnerability scanner to identify weaknesses
- E
Gathering information from third-party websites or forums about the client's technology stack
Show answer and explanation
Correct answers: B, C, E
Explanation
Passive reconnaissance involves gathering information without directly interacting with the target system, typically using publicly available data or third-party resources. Options 2, 3, and 5 align with this definition, while options 1 and 4 involve direct interaction with the target system, making them active reconnaissance methods.
- A. Incorrect.
Active scanning tools like Nmap interact directly with the target system and are considered active reconnaissance, not passive.
- B. Correct.
Inspecting publicly available DNS records is a passive activity since it does not directly interact with the target system.
- C. Correct.
Reviewing the client's website for metadata and public information is a passive approach as it relies on analyzing publicly available resources.
- D. Incorrect.
Using an automated vulnerability scanner involves direct interaction with the target system and is classified as active reconnaissance.
- E. Correct.
Gathering information from third-party websites or forums about the client's technology stack is passive since it does not involve engaging with the client's systems directly.