Exam 312-85 Topic 6 Question 5 Discussion
Actual exam question for ECCouncil's 312-85 exam
Question #: 5
Topic #: 6
Question #: 5
Topic #: 6
Karry, a threat analyst at an XYZ organization, is performing threat intelligence analysis. During the data collection phase, he used a data collection method that involves no participants and is purely based on analysis and observation of activities and processes going on within the local boundaries of the organization.
Identify the type of data collection method used by Karry.
Identify the type of data collection method used by Karry.
Suggested Answer: D Vote an answer
The described approach-non-intrusive observation without direct interaction or participants-matches the Passive Data Collection method.
Passive Data Collection involves monitoring and gathering data from systems, logs, and networks without actively probing or influencing them. It is commonly used within organizational boundaries to observe normal operations, network flows, and user behaviors.
Why the Other Options Are Incorrect:
* A. Exploited data collection: Involves data derived from external sources or compromised systems.
* B. Active data collection: Requires interaction with the environment, such as scanning or probing.
* C. Raw data collection: Refers to gathering unprocessed data, not necessarily passive.
Conclusion:
Karry used the Passive Data Collection method, which relies on observation and non-intrusive monitoring.
Final Answer: D. Passive data collection
Explanation Reference (Based on CTIA Study Concepts):
CTIA defines passive collection as observing and recording ongoing activities within an environment without direct engagement or disruption.
Passive Data Collection involves monitoring and gathering data from systems, logs, and networks without actively probing or influencing them. It is commonly used within organizational boundaries to observe normal operations, network flows, and user behaviors.
Why the Other Options Are Incorrect:
* A. Exploited data collection: Involves data derived from external sources or compromised systems.
* B. Active data collection: Requires interaction with the environment, such as scanning or probing.
* C. Raw data collection: Refers to gathering unprocessed data, not necessarily passive.
Conclusion:
Karry used the Passive Data Collection method, which relies on observation and non-intrusive monitoring.
Final Answer: D. Passive data collection
Explanation Reference (Based on CTIA Study Concepts):
CTIA defines passive collection as observing and recording ongoing activities within an environment without direct engagement or disruption.
by Leo at Jul 07, 2026, 11:59 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).