Eccouncil 312-49 Exam - Topic 1 Question 46 Discussion

Actual exam question for Eccouncil's 312-49 exam

Question #: 46
Topic #: 1

You work as an IT security auditor hired by a law firm in Boston to test whether you can gain access to sensitive information about the company clients. You have rummaged through their trash and found very little information. You do not want to set off any alarms on their network, so you plan on performing passive foot printing against their Web servers. What tool should you use?

APing sweep

BNmap

CNetcraft

DDig

Show Suggested Answer

Suggested Answer: B

by Buddy at Jul 30, 2023, 05:38 PM

Limited Time Offer

25%

Off

Get Premium 312-49 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hubert

5 months ago

Really? I thought passive foot printing was more about tools like Netcraft.

upvoted 0 times

...

Alease

5 months ago

Wait, why not just use Nmap? Seems like the best option.

upvoted 0 times

...

Elvera

5 months ago

Dig is great for DNS queries, but not really for foot printing.

upvoted 0 times

...

Kattie

5 months ago

Netcraft is a solid choice too, especially for passive info.

upvoted 0 times

...

Stevie

6 months ago

I’d go with Nmap for sure. It’s super reliable.

upvoted 0 times

...

Teri

6 months ago

I recall Dig being useful for DNS queries, but I’m not confident if it’s the right choice here.

upvoted 0 times

...

Rasheeda

6 months ago

I’m leaning towards using Nmap, but I feel like it might be too aggressive for passive scanning.

upvoted 0 times

...

Lashon

6 months ago

I think Netcraft is a good option for passive information gathering, especially for web servers.

upvoted 0 times

...

Yoko

6 months ago

I remember we discussed passive footprinting in class, but I’m not entirely sure which tool is best for that.

upvoted 0 times

...

Makeda

6 months ago

Okay, let's see. The key here is that we need to use the firewall logs to identify unmanaged external applications and the users accessing them. Cloud App Discovery sounds like the right tool for that job.

upvoted 0 times

...

Jamal

6 months ago

Ah, this is a tricky one. I'm not entirely sure about the difference between "verified" and "validated." I'll have to review my notes on requirements management to make sure I select the right answer.

upvoted 0 times

...

Hui

6 months ago

This is a good one. I'm pretty confident I know the solution, but I'll double-check the details to make sure I don't miss anything.

upvoted 0 times

...

Glen

6 months ago

I'm pretty sure the default spanning-tree mode on Arista switches is RPVST, but I'll double-check the options just to be sure.

upvoted 0 times

...

Claribel

11 months ago

I'm just picturing the auditor rummaging through the trash and finding a juicy client list. Someone's getting fired!

upvoted 0 times

Maryann

10 months ago

C) Netcraft

upvoted 0 times

...

Dorothy

10 months ago

B) Nmap

upvoted 0 times

...

Aleshia

10 months ago

D) Dig

upvoted 0 times

...

Derick

10 months ago

A) Ping sweep

upvoted 0 times

...

Tracey

10 months ago

C) Netcraft

upvoted 0 times

...

Sharen

10 months ago

B) Nmap

upvoted 0 times

...

Mitzie

10 months ago

A) Ping sweep

upvoted 0 times

...

Paola

11 months ago

Haha, a ping sweep? Really? That's like the most basic and noisy way to do reconnaissance. Definitely not the right choice here.

upvoted 0 times

Trinidad

11 months ago

User 3: Netcraft might also be a good option for this scenario.

upvoted 0 times

...

Ethan

11 months ago

User 2: Nmap would be a better choice than a ping sweep.

upvoted 0 times

...

Carma

11 months ago

User 1: What tool should we use for passive foot printing against their Web servers?

upvoted 0 times

...

Scot

12 months ago

I'm going with Dig. It's a simple yet effective tool for passive DNS reconnaissance, which could be really useful in this scenario.

upvoted 0 times

Ryann

10 months ago

User 4: Let's weigh the pros and cons of each tool before making a final decision.

upvoted 0 times

...

Reuben

10 months ago

User 3: I see your point, but I still think Dig is the best option for passive DNS reconnaissance.

upvoted 0 times

...

Eliseo

10 months ago

User 2: I disagree, I believe Netcraft would provide more valuable information without setting off any alarms.

upvoted 0 times

...

Berry

10 months ago

User 1: I think Nmap would be a better choice for this situation.

upvoted 0 times

...

Adell

10 months ago

User 4: Let's weigh the pros and cons of each tool before making a final decision.

upvoted 0 times

...

Whitley

10 months ago

User 3: I see your point, but I still think Dig is the best option for passive DNS reconnaissance.

upvoted 0 times

...

Arlean

11 months ago

User 2: I disagree, I believe Netcraft would provide more valuable information without setting off any alarms.

upvoted 0 times

...

Gilma

11 months ago

User 1: I think Nmap would be a better choice for this situation.

upvoted 0 times

...

Andra

12 months ago

Nmap seems like the obvious choice. It's a powerful tool for network scanning and can give you a lot of valuable information about the target.

upvoted 0 times

...

Jeanice

12 months ago

I'm not sure, but I think Netcraft could also be a good option for passive foot printing.

upvoted 0 times

...

Ahmad

12 months ago

I agree with Helaine, Nmap is a great tool for this.

upvoted 0 times

...

Helaine

12 months ago

I think we should use Nmap for passive foot printing.

upvoted 0 times

...

Felton

1 year ago

I think Netcraft is the way to go here. It's a passive tool that can gather a ton of information about the target website without being intrusive.

upvoted 0 times

Bernardo

11 months ago

User 2: Yeah, it's important to gather information without alerting the company.

upvoted 0 times

...

Lucy

11 months ago

User 1: I agree, Netcraft is a good choice for passive foot printing.

upvoted 0 times

...

Minna

1 year ago

I'm not sure, but I think Netcraft could also be a good option for passive foot printing.

upvoted 0 times

...

Tawny

1 year ago

I agree with Cornell, Nmap is a great tool for this.

upvoted 0 times

...

Cornell

1 year ago

I think we should use Nmap for passive foot printing.

upvoted 0 times

...