A penetration tester is preparing to perform activities for

A penetration tester is preparing to perform activities for - CompTIA Pentest+ PT0-003

Question

A penetration tester is preparing to perform activities for a client that requires minimal disruption to company operations.
Which of the following are considered passive reconnaissance tools? (Choose two.)

Answers

correct

Wireshark
Nessus
Retina
Burp Suite
correct

Shodan
Nikto

Explanation

Correct Answers:A. Wireshark E. Shodan

Passive reconnaissance involves gathering information about a target without directly interacting with its systems to avoid detection or disruption.

Wireshark
- Wireshark is a packet capture tool that allows a penetration tester to analyze network traffic passively. It does not generate traffic or actively scan a target but instead listens to existing network traffic, making it a passive reconnaissance tool.
Shodan
- Shodan is an internet-wide search engine that scans and indexes devices connected to the internet. A penetration tester can use it to search for publicly available information about a target's infrastructure (e.g., exposed services, open ports, vulnerable devices) without directly interacting with the target. This makes it a passive reconnaissance tool.

Why the Other Options are Incorrect?

Nessus

Nessus is an active vulnerability scanner. It sends probes and interacts with the target network to identify vulnerabilities, making it an active reconnaissance tool, not passive.

Retina

Retina is another vulnerability scanner that actively scans for security weaknesses, generating network traffic and potentially disrupting services. This makes it an active reconnaissance tool rather than a passive one.

Burp Suite

Burp Suite is a web security testing tool used for actively scanning and interacting with web applications. It allows a penetration tester to manipulate traffic, conduct intrusive testing, and actively engage with a target, which is not considered passive reconnaissance.

View Full Course Content Try our Free Questions

No Payment Cards Needed

CompTIA Pentest+ exam

Normally $69

$45/month