Question
A penetration tester begins an engagement by performing port and service scans against the client environment according to the rules of engagement. Which of the following reconnaissance types is the tester performing?
- A. Active Correct
- B. Passive
- C. Defensive
- D. Offensive
Explanation
Port and service scans send traffic directly to the target systems, which makes them active reconnaissance. Passive reconnaissance gathers information without interacting with the target, for example from public records or OSINT. Defensive and offensive are not reconnaissance types.
