Certified Ethical Hacker (CEH) Practice Question

A passive vulnerability assessment observes and analyzes the traffic that is already flowing on the network and matches it against known vulnerability signatures or misconfiguration patterns. Because it does not actively send probes or exploit attempts, it minimizes the chance of disrupting fragile operational technology environments. Active network scans and dynamic web tests generate packets that could interfere with time-sensitive control traffic, and agent-based credentialed scans still create network load and require software installation on hosts, both of which violate the no-traffic constraint.