Which assessment is used to sniff network traffic to discover active systems, network services, applications, and vulnerabilities?

Which assessment is used to sniff network traffic to discover active systems, network services, applications, and vulnerabilities?

• A. Active Assessment
• B. Passive Assessment
• C. Internal Assessment
• D. Distributed Assessment

Answer: (B)

Passive assessment focuses on observing network traffic without actively sending probes. By capturing packets with tools like Wireshark or tcpdump, you can see which hosts are communicating, which ports and protocols are in use, and any banners or application data that reveal services and software versions. This information helps identify active systems, the services they offer, the applications in use, and potential weaknesses based on misconfigurations or outdated software—all without generating traffic that could alert defenders. In contrast, active assessment involves probing or scanning hosts, and terms like internal or distributed refer to scope or deployment, not the method of traffic observation. So, the approach that sniffs network traffic to uncover active systems, services, applications, and vulnerabilities is passive assessment.

Passive assessment focuses on observing network traffic without actively sending probes. By capturing packets with tools like Wireshark or tcpdump, you can see which hosts are communicating, which ports and protocols are in use, and any banners or application data that reveal services and software versions. This information helps identify active systems, the services they offer, the applications in use, and potential weaknesses based on misconfigurations or outdated software—all without generating traffic that could alert defenders. In contrast, active assessment involves probing or scanning hosts, and terms like internal or distributed refer to scope or deployment, not the method of traffic observation. So, the approach that sniffs network traffic to uncover active systems, services, applications, and vulnerabilities is passive assessment.