CEH Footprinting, Reconnaissance and Scanning Practice Question
Which of the following tools is PRIMARILY used for passive OSINT gathering and can query multiple search engines, social media platforms, and public databases to collect information about a target?
⚠ Common exam trap
Many candidates confuse theHarvester with Maltego because both are OSINT tools, but theHarvester is more specialized for email and subdomain harvesting, while Maltego is the broader platform for multi-source passive intelligence gathering and visualization.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Maltego
Maltego is primarily used for passive OSINT gathering because it leverages open-source intelligence feeds, search engines, social media platforms, and public databases to collect and correlate information about a target without directly interacting with the target's systems. Its transform-based architecture allows it to query multiple data sources simultaneously, making it the correct choice for passive reconnaissance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Nmap
Why it's wrong here
Nmap (Network Mapper) is fundamentally an active reconnaissance tool designed to discover hosts and services on a computer network by sending packets and analyzing responses. It directly interacts with target systems to perform port scanning, operating system detection, and service version enumeration. This direct engagement makes it unsuitable for passive OSINT, which aims to gather information without alerting the target.
- ✗
Wireshark
Why it's wrong here
Wireshark functions as a powerful network protocol analyzer, capturing and interactively browsing traffic running on a computer network interface. While it passively observes data, its scope is limited to local network segments where it can capture packets, making it invaluable for troubleshooting and deep packet inspection. It is not designed for open-source intelligence (OSINT) gathering from external, publicly available sources.
- ✓
Maltego
Why this is correct
Maltego is a comprehensive graphical link analysis tool specifically engineered for open-source intelligence (OSINT) and forensic investigations. It excels at aggregating data from diverse public sources, including DNS records, social media, and WHOIS information, to uncover relationships between entities. Its unique strength lies in visualizing these connections through interactive graphs, enabling analysts to identify patterns and build a detailed profile of a target without direct interaction.
- ✗
theHarvester
Why it's wrong here
theHarvester is a command-line tool primarily used for gathering email addresses, subdomain names, hostnames, and employee names from public sources like search engines and PGP key servers. While it is indeed an effective OSINT tool for initial information gathering, its functionality is more focused and less comprehensive than Maltego. It lacks the advanced data aggregation, entity transformation, and graphical visualization capabilities that Maltego offers for complex relationship mapping.
Go deeper
Related to this question
About these practice questions
One of 870 original CEH practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.