Eccouncil 312-49 Exam - Topic 1 Question 46 Discussion

Actual exam question for Eccouncil's 312-49 exam

Question #: 46
Topic #: 1

You work as an IT security auditor hired by a law firm in Boston to test whether you can gain access to sensitive information about the company clients. You have rummaged through their trash and found very little information. You do not want to set off any alarms on their network, so you plan on performing passive foot printing against their Web servers. What tool should you use?

APing sweep

BNmap

CNetcraft

DDig

Show Suggested Answer

Suggested Answer: B

by Buddy at Jul 30, 2023, 05:38 PM

Limited Time Offer

25%

Off

Get Premium 312-49 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hubert

9 months ago

Really? I thought passive foot printing was more about tools like Netcraft.

upvoted 0 times

...

Alease

10 months ago

Wait, why not just use Nmap? Seems like the best option.

upvoted 0 times

...

Elvera

10 months ago

Dig is great for DNS queries, but not really for foot printing.

upvoted 0 times

...

Kattie

10 months ago

Netcraft is a solid choice too, especially for passive info.

upvoted 0 times

...

Stevie

10 months ago

I’d go with Nmap for sure. It’s super reliable.

upvoted 0 times

...

Teri

11 months ago

I recall Dig being useful for DNS queries, but I’m not confident if it’s the right choice here.

upvoted 0 times

...

Rasheeda

11 months ago

I’m leaning towards using Nmap, but I feel like it might be too aggressive for passive scanning.

upvoted 0 times

...

Lashon

11 months ago

I think Netcraft is a good option for passive information gathering, especially for web servers.

upvoted 0 times

...

Yoko

11 months ago

I remember we discussed passive footprinting in class, but I’m not entirely sure which tool is best for that.

upvoted 0 times

...

Makeda

11 months ago

Okay, let's see. The key here is that we need to use the firewall logs to identify unmanaged external applications and the users accessing them. Cloud App Discovery sounds like the right tool for that job.

upvoted 0 times

...

Jamal

11 months ago

Ah, this is a tricky one. I'm not entirely sure about the difference between "verified" and "validated." I'll have to review my notes on requirements management to make sure I select the right answer.

upvoted 0 times

...

Hui

11 months ago

This is a good one. I'm pretty confident I know the solution, but I'll double-check the details to make sure I don't miss anything.

upvoted 0 times

...

Glen

11 months ago

I'm pretty sure the default spanning-tree mode on Arista switches is RPVST, but I'll double-check the options just to be sure.

upvoted 0 times

...

Claribel

1 year ago

I'm just picturing the auditor rummaging through the trash and finding a juicy client list. Someone's getting fired!

upvoted 0 times

Maryann

1 year ago

C) Netcraft

upvoted 0 times

...

Dorothy

1 year ago

B) Nmap

upvoted 0 times

...

Aleshia

1 year ago

D) Dig

upvoted 0 times

...

Derick

1 year ago

A) Ping sweep

upvoted 0 times

...

Tracey

1 year ago

C) Netcraft

upvoted 0 times

...

Sharen

1 year ago

B) Nmap

upvoted 0 times

...

Mitzie

1 year ago

A) Ping sweep

upvoted 0 times

...

Paola

1 year ago

Haha, a ping sweep? Really? That's like the most basic and noisy way to do reconnaissance. Definitely not the right choice here.

upvoted 0 times

Trinidad

1 year ago

User 3: Netcraft might also be a good option for this scenario.

upvoted 0 times

...

Ethan

1 year ago

User 2: Nmap would be a better choice than a ping sweep.

upvoted 0 times

...

Carma

1 year ago

User 1: What tool should we use for passive foot printing against their Web servers?

upvoted 0 times

...

Scot

1 year ago

I'm going with Dig. It's a simple yet effective tool for passive DNS reconnaissance, which could be really useful in this scenario.

upvoted 0 times

Ryann

1 year ago

User 4: Let's weigh the pros and cons of each tool before making a final decision.

upvoted 0 times

...

Reuben

1 year ago

User 3: I see your point, but I still think Dig is the best option for passive DNS reconnaissance.

upvoted 0 times

...

Eliseo

1 year ago

User 2: I disagree, I believe Netcraft would provide more valuable information without setting off any alarms.

upvoted 0 times

...

Berry

1 year ago

User 1: I think Nmap would be a better choice for this situation.

upvoted 0 times

...

Adell

1 year ago

User 4: Let's weigh the pros and cons of each tool before making a final decision.

upvoted 0 times

...

Whitley

1 year ago

User 3: I see your point, but I still think Dig is the best option for passive DNS reconnaissance.

upvoted 0 times

...

Arlean

1 year ago

User 2: I disagree, I believe Netcraft would provide more valuable information without setting off any alarms.

upvoted 0 times

...

Gilma

1 year ago

User 1: I think Nmap would be a better choice for this situation.

upvoted 0 times

...

Andra

1 year ago

Nmap seems like the obvious choice. It's a powerful tool for network scanning and can give you a lot of valuable information about the target.

upvoted 0 times

...

Jeanice

1 year ago

I'm not sure, but I think Netcraft could also be a good option for passive foot printing.

upvoted 0 times

...

Ahmad

1 year ago

I agree with Helaine, Nmap is a great tool for this.

upvoted 0 times

...

Helaine

1 year ago

I think we should use Nmap for passive foot printing.

upvoted 0 times

...

Felton

1 year ago

I think Netcraft is the way to go here. It's a passive tool that can gather a ton of information about the target website without being intrusive.

upvoted 0 times

Bernardo

1 year ago

User 2: Yeah, it's important to gather information without alerting the company.

upvoted 0 times

...

Lucy

1 year ago

User 1: I agree, Netcraft is a good choice for passive foot printing.

upvoted 0 times

...

Minna

1 year ago

I'm not sure, but I think Netcraft could also be a good option for passive foot printing.

upvoted 0 times

...

Tawny

1 year ago

I agree with Cornell, Nmap is a great tool for this.

upvoted 0 times

...

Cornell

1 year ago

I think we should use Nmap for passive foot printing.

upvoted 0 times

...