You work as an IT security auditor hired by a law firm in Boston to test whether you can gain access to sensitiveinformation about the company clients. You have rummaged through their trash and found very little information.
You do not want to set off any alarms on their network, so you plan on performing passivefoot printing against their Web servers.What tool should you use?
Suggested Answer: D
Get Premium ECSAv10 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
CA
Carrol
11 months ago
Dig is useful too, but not as passive as Netcraft.
SH
Sherrell
11 months ago
Wait, can you really get enough info just from Netcraft?
LO
Long
11 months ago
Nmap is more active, not really what you want here.
CO
Cora
12 months ago
Totally agree, Netcraft gives great insights!
GL
Glenn
12 months ago
I think Netcraft is the best choice for passive footprinting.
BE
Beckie
1 year ago
I practiced a similar question, and I believe Netcraft was the tool we focused on for passive web server analysis.
BE
Ben
1 year ago
I think Dig could be useful for DNS queries, but I'm not confident if it's considered passive enough for this scenario.
BE
Bette
1 year ago
I’m not entirely sure, but I feel like Nmap is more for active scanning, so it might not be the best fit here.
JO
Johnathon
1 year ago
I remember we discussed passive footprinting in class, and I think Netcraft is a good choice for gathering information without triggering alerts.
SK
Skye
1 year ago
I'm feeling pretty confident about this one. Netcraft is specifically designed for passive web server footprinting, so that's definitely the way to go. Nmap and the other options just don't seem as well-suited for this particular task.
DE
Denny
1 year ago
Okay, let's see. We need a tool that can gather information about the web servers without directly interacting with them. Ping sweep seems a bit too basic, and Dig is more for DNS-related tasks. I'm leaning towards Netcraft as the best option here.
NO
Norah
1 year ago
Hmm, I'm a bit unsure about this one. Nmap could potentially work for passive footprinting, but it might be a bit too active for this scenario where we want to avoid setting off any alarms. I'll have to think this through carefully.
AR
Arthur
1 year ago
This seems like a straightforward passive footprinting question. I think Netcraft would be the best tool to use here since it's designed for gathering information about websites without directly interacting with them.
AM
Amber
1 year ago
Grouping images, no problem. I'll just select them all and hit the Group button.
CA
Cassie
1 year ago
Ah, the classic 'rummage through the trash' technique. Gotta love it! Now, let's see, Netcraft is the way to go - it's like a ninja, silently gathering intel while the security team is busy chasing their own tail.
CA
Carmela
1 year ago
C) Ping sweep
RO
Robt
1 year ago
B) Netcraft
ED
Eden
1 year ago
A) Nmap
DO
Dorthy
1 year ago
Dig? Really? Might as well just call the firm and ask for the info. No, Netcraft is the way to go - it's like a secret agent for web servers, gathering intel without anyone the wiser.
KA
Kaycee
1 year ago
C) Ping sweep
KA
Kaitlyn
1 year ago
B) Netcraft
LA
Lanie
1 year ago
A) Nmap
MA
Maryrose
2 years ago
You know, I heard the IT team at this law firm is on high alert for any suspicious activity. Better not use Nmap or they'll come knocking at my door. Netcraft sounds like the perfect stealth tool for the job!
SH
Shanda
1 year ago
D) Dig
PE
Percy
1 year ago
C) Ping sweep
VE
Verlene
1 year ago
B) Netcraft
PA
Pamella
1 year ago
A) Nmap
VA
Valene
2 years ago
Nmap? Nah, too noisy. Ping sweep? Come on, that's like using a sledgehammer to crack a nut. Gotta go with Dig, that's the subtle touch I need for this job.
KE
Kenny
1 year ago
User 3: Gotta go with Dig, that's the subtle touch I need for this job.
EL
Elenor
1 year ago
User 2: Elenor is right, Nmap might set off alarms.
TY
Tyra
1 year ago
User 1: Nmap? Nah, too noisy.
LI
Lilli
2 years ago
Hmm, passively footprinting their web servers? Netcraft seems like the way to go - it'll let me gather tons of useful info without triggering any alarms. I'm on it!
CH
Cherelle
1 year ago
User 2: Yeah, it's a great tool to gather information without being detected.
WE
Wei
1 year ago
User 1: Netcraft is a good choice for passive footprinting.
FL
Flo
2 years ago
I think Netcraft might also be a good option to gather information about their Web servers.
HA
Harrison
2 years ago
I agree with Kris, Nmap is a great tool for this.
KR
Kris
2 years ago
I think we should use Nmap for passive foot printing.