Eccouncil ECSS Exam - Topic 7 Question 115 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 115
Topic #: 7

[All ECSS Questions]

Michael is an attacker who aims to hack Bob's system. He started collecting data without any active interaction with Bob's system. Using this technique. Michael can extract sensitive information from unencrypted data.

Identify the class of attack Michael has launched in the above scenario.

DPassive attack

BInsider attack

AAc live attack

CClose in attack

Show Suggested Answer

Suggested Answer: D

In apassive attack, the attacker observes or collects information without actively interacting with the target system. Michael's action of collecting data from Bob's system without any active interaction falls under this category. Passive attacks aim to extract sensitive information without altering the system's state or causing any disruption.

by Florencia at Jan 28, 2026, 12:36 PM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vilma

5 days ago

I'm not entirely sure, but it sounds like it could be a form of data sniffing or eavesdropping.

upvoted 0 times

...

Valentin

10 days ago

I think this might be a passive attack since Michael is collecting data without directly interacting with the system.

upvoted 0 times

...

Salome

15 days ago

I'm a bit confused on the specifics here. Is this considered a type of malware attack or more of an information gathering technique? I'll need to review my notes on different attack vectors to be sure.

upvoted 0 times

...

Salome

20 days ago

I've got this! This is clearly a form of passive reconnaissance, where the attacker gathers sensitive information by monitoring unencrypted network traffic. Probably something like packet sniffing or network surveillance.

upvoted 0 times

...

Von

26 days ago

Okay, I think this is a type of passive attack where the attacker collects data without directly interacting with the target system. Maybe something like a side-channel attack or traffic analysis?

upvoted 0 times

...

Jamie

1 month ago

Hmm, I'm not totally sure. Is this some kind of eavesdropping or data extraction attack? I'll need to think through the details more.

upvoted 0 times

...

Juliana

1 month ago

This sounds like a passive information gathering attack, maybe something like reconnaissance or network sniffing.

upvoted 0 times

...