Which tool is described as a passive fingerprinting tool not used in Nmap?

• A. ping(8)
• B. -iL
• C. --exclude
• D. p0f

Answer: (D)

Passive fingerprinting learns about hosts by listening to existing traffic instead of sending probes. p0f is a dedicated tool that passively observes network packets and infers details like the operating system and network stack from those observations, without actively probing targets. Nmap, in contrast, relies on active fingerprinting, sending crafted packets and analyzing responses to identify hosts, services, and OS information. Since p0f operates passively and isn’t part of Nmap’s fingerprinting workflow, it isn’t used by Nmap. The other options aren’t fingerprinting tools at all—ping(8) is just a reachability utility, -iL loads targets from a file, and --exclude skips certain targets. So p0f is the correct choice.