CompTIA Security+ (SY0-501) — Question 16

An in-house penetration tester is using a packet capture device to listen in on network communications. This is an example of:

Answer options

• A. Passive reconnaissance
• B. Persistence
• C. Escalation of privileges
• D. Exploiting the switch

Correct answer: A

Explanation

The correct answer is A, Passive reconnaissance, because the tester is gathering information without actively engaging or altering the network. The other options involve more aggressive or interactive methods of gaining information or control over a system, such as gaining higher access levels or manipulating devices.