Exam 312-50v10 topic 1 question 19 discussion

Actual exam question from ECCouncil's 312-50v10

Question #: 19
Topic #: 1

When conducting a penetration test, it is crucial to use all means to get all available information about the target network. One of the ways to do that is by sniffing the network. Which of the following cannot be performed by the passive network sniffing?

A. Identifying operating systems, services, protocols and devices
B. Modifying and replaying captured network traffic
C. Collecting unencrypted information about usernames and passwords
D. Capturing a network traffic for further analysis

Show Suggested Answer

Suggested Answer: B 🗳️

by IT_Nerdz at June 12, 2020, 6:44 a.m.

Comments

Submit Cancel

IT_Nerdz

Highly Voted 12 months ago

Passive sniffing is not having any direct interaction or it would be considered active sniffing Modifying and replaying captured traffic would be considered active because you will be directly interacting with the target(s)

upvoted 6 times

MagicianRecon

7 months, 1 week ago

Not sure. Replaying traffic on the network does not mean that you need to interact with the target. Plus questions says what can you do with the network traffic sniffed? You can modify and replay it which is also the reason most firewalls and VPN solutions support anti-replay

upvoted 1 times

...

gizicudu

6 months, 2 weeks ago

You can still sniff passively then do a replay attack actively, replay attack does not make sniffing active retroactively.

upvoted 2 times

...