Study. uk . com
  1. Home
  2. All questions
  3. Question 92

CompTIA Security+ study material · question 92 of 611

During a test, an assessor gathers information about the target using only public records and search engines. What is the main advantage of this approach?

  1. It does not require rules of engagement at all
  2. It validates findings without exploitation
  3. It leaves no trace in the target's logs
  4. It finds more vulnerabilities than active scanning
Show the answer

Answer: C. It leaves no trace in the target's logs

Passive reconnaissance sends nothing to the target, so it produces no entries in the target's own records.

Source: NIST SP 800-115 (NIST) — SP 800-115 § 4 Target Identification and Analysis Techniques

Challenge yourself on this topic → Study as cards