Eccouncil ECSAv10 Exam - Topic 6 Question 76 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 76
Topic #: 6

You work as an IT security auditor hired by a law firm in Boston to test whether you can gain access to sensitiveinformation about the company clients. You have rummaged through their trash and found very little information.

You do not want to set off any alarms on their network, so you plan on performing passivefoot printing against their Web servers.What tool should you use?

ANmap

BNetcraft

CPing sweep

DDig

Show Suggested Answer

Suggested Answer: D

by Kathrine at Aug 03, 2024, 10:53 AM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carrol

9 months ago

Dig is useful too, but not as passive as Netcraft.

upvoted 0 times

...

Sherrell

9 months ago

Wait, can you really get enough info just from Netcraft?

upvoted 0 times

...

Long

10 months ago

Nmap is more active, not really what you want here.

upvoted 0 times

...

Cora

10 months ago

Totally agree, Netcraft gives great insights!

upvoted 0 times

...

Glenn

10 months ago

I think Netcraft is the best choice for passive footprinting.

upvoted 0 times

...

Beckie

10 months ago

I practiced a similar question, and I believe Netcraft was the tool we focused on for passive web server analysis.

upvoted 0 times

...

Ben

11 months ago

I think Dig could be useful for DNS queries, but I'm not confident if it's considered passive enough for this scenario.

upvoted 0 times

...

Bette

11 months ago

I’m not entirely sure, but I feel like Nmap is more for active scanning, so it might not be the best fit here.

upvoted 0 times

...

Johnathon

11 months ago

I remember we discussed passive footprinting in class, and I think Netcraft is a good choice for gathering information without triggering alerts.

upvoted 0 times

...

Skye

11 months ago

I'm feeling pretty confident about this one. Netcraft is specifically designed for passive web server footprinting, so that's definitely the way to go. Nmap and the other options just don't seem as well-suited for this particular task.

upvoted 0 times

...

Denny

11 months ago

Okay, let's see. We need a tool that can gather information about the web servers without directly interacting with them. Ping sweep seems a bit too basic, and Dig is more for DNS-related tasks. I'm leaning towards Netcraft as the best option here.

upvoted 0 times

...

Norah

11 months ago

Hmm, I'm a bit unsure about this one. Nmap could potentially work for passive footprinting, but it might be a bit too active for this scenario where we want to avoid setting off any alarms. I'll have to think this through carefully.

upvoted 0 times

...

Arthur

11 months ago

This seems like a straightforward passive footprinting question. I think Netcraft would be the best tool to use here since it's designed for gathering information about websites without directly interacting with them.

upvoted 0 times

...

Amber

11 months ago

Grouping images, no problem. I'll just select them all and hit the Group button.

upvoted 0 times

...

Cassie

1 year ago

Ah, the classic 'rummage through the trash' technique. Gotta love it! Now, let's see, Netcraft is the way to go - it's like a ninja, silently gathering intel while the security team is busy chasing their own tail.

upvoted 0 times

Carmela

1 year ago

C) Ping sweep

upvoted 0 times

...

Robt

1 year ago

B) Netcraft

upvoted 0 times

...

Eden

1 year ago

A) Nmap

upvoted 0 times

...

Dorthy

1 year ago

Dig? Really? Might as well just call the firm and ask for the info. No, Netcraft is the way to go - it's like a secret agent for web servers, gathering intel without anyone the wiser.

upvoted 0 times

Kaycee

1 year ago

C) Ping sweep

upvoted 0 times

...

Kaitlyn

1 year ago

B) Netcraft

upvoted 0 times

...

Lanie

1 year ago

A) Nmap

upvoted 0 times

...

Maryrose

1 year ago

You know, I heard the IT team at this law firm is on high alert for any suspicious activity. Better not use Nmap or they'll come knocking at my door. Netcraft sounds like the perfect stealth tool for the job!

upvoted 0 times

Shanda

1 year ago

D) Dig

upvoted 0 times

...

Percy

1 year ago

C) Ping sweep

upvoted 0 times

...

Verlene

1 year ago

B) Netcraft

upvoted 0 times

...

Pamella

1 year ago

A) Nmap

upvoted 0 times

...

Valene

1 year ago

Nmap? Nah, too noisy. Ping sweep? Come on, that's like using a sledgehammer to crack a nut. Gotta go with Dig, that's the subtle touch I need for this job.

upvoted 0 times

Kenny

1 year ago

User 3: Gotta go with Dig, that's the subtle touch I need for this job.

upvoted 0 times

...

Elenor

1 year ago

User 2: Elenor is right, Nmap might set off alarms.

upvoted 0 times

...

Tyra

1 year ago

User 1: Nmap? Nah, too noisy.

upvoted 0 times

...

Lilli

1 year ago

Hmm, passively footprinting their web servers? Netcraft seems like the way to go - it'll let me gather tons of useful info without triggering any alarms. I'm on it!

upvoted 0 times