Certified Ethical Hacker (CEH) — Question 48

Which of the following tools can be used for passive OS fingerprinting?

Answer options

• A. tcpdump
• B. nmap
• C. ping
• D. tracert

Correct answer: A

Explanation

tcpdump is a packet analyzer that can capture and analyze network traffic, making it suitable for passive OS fingerprinting. nmap is primarily an active scanning tool, while ping is used for checking connectivity and tracert is for route tracing, neither of which can perform passive OS fingerprinting.