CompTIA PenTest+ (PT0-002) — Question 89

A penetration tester is preparing to perform activities for a client that requires minimal disruption to company operations.
Which of the following are considered passive reconnaissance tools? (Choose two.)

Answer options

• A. Wireshark
• B. Nessus
• C. Retina
• D. Burp Suite
• E. Shodan
• F. Nikto

Correct answer: A, E

Explanation

Wireshark and Shodan are both tools that allow for passive reconnaissance, meaning they can gather information without actively engaging with the target systems. In contrast, Nessus, Retina, Burp Suite, and Nikto are used for active scanning and testing, which could disrupt operations.