Which type of attack specifically aims to gather information without altering system resources?

• A. Active attack
• B. Passive attack
• C. Remote attack
• D. Local attack

Answer: (B)

The type of attack that specifically aims to gather information without altering system resources is a passive attack. This method focuses on monitoring and intercepting data transmission to obtain information without causing any disruption to the system or detectable changes to its resources.

Passive attacks often involve the use of techniques like eavesdropping or traffic analysis, where the attacker collects data and communications without impacting the usability of the system or alerting the users. An important point of distinction for passive attacks is that they are stealthy; the unauthorized party avoids taking actions that would raise suspicion or lead to detection by the system's security measures.

In contrast, other types of attacks, such as active attacks, involve unauthorized changes or disruptions to system resources, aiming not only to gather information but also to manipulate or damage the data or systems. Remote and local attacks refer to the origin of the attack—whether it occurs from a distant location or on the same physical machine—but do not explicitly define the intent to modify or collect information undetected, which is a hallmark of passive attacks.

Hence, the focus on non-intrusive information gathering solidly identifies passive attack as the correct choice for this question.