QuestionQ4

Network Forensics and Traffic Analysis

Which of the following tools may be used for passive OS fingerprinting?

  • A dig
  • B nmap
  • C ping
  • D tcpdump
Explanation

Passive OS fingerprinting analyzes characteristics of traffic already observed on the network, such as TCP/IP packet fields and behavior, without transmitting probes to the target. tcpdump can capture that traffic for analysis.

Community Discussion

No comments yet. Be the first to start the discussion!