In the given material, which tool is described as a passive fingerprinting utility outside of Nmap?

In the given material, which tool is described as a passive fingerprinting utility outside of Nmap?

• A. nmap
• B. p0f
• C. ping(8)
• D. --open

Answer: (B)

Passive fingerprinting examines traffic that’s already on the wire to infer details about remote hosts without sending any probes. p0f is a well-known tool that does exactly this by passively watching packets and analyzing patterns in timing, header fields, and other characteristics to guess operating systems and network stacks. Because it doesn’t generate its own probes, it’s described as a passive fingerprinting utility outside of Nmap, which is primarily an active scanner. The other options don’t fit: nmap uses active probes, ping is just a reachability check, and --open is not a fingerprinting tool.

Passive fingerprinting examines traffic that’s already on the wire to infer details about remote hosts without sending any probes. p0f is a well-known tool that does exactly this by passively watching packets and analyzing patterns in timing, header fields, and other characteristics to guess operating systems and network stacks. Because it doesn’t generate its own probes, it’s described as a passive fingerprinting utility outside of Nmap, which is primarily an active scanner. The other options don’t fit: nmap uses active probes, ping is just a reachability check, and --open is not a fingerprinting tool.