Certified Ethical Hacker (CEH v11) — Question 175

Which of the following tools can be used for passive OS fingerprinting?

Answer options

• A. nmap
• B. tcpdump
• C. tracert
• D. ping

Correct answer: B

Explanation

tcpdump is a packet analyzer that captures network traffic, allowing for passive OS fingerprinting by analyzing packet characteristics. nmap is primarily used for active fingerprinting, while tracert and ping do not provide the necessary capabilities for OS fingerprinting.