Exam 312-50v13 topic 1 question 119 discussion

D. Passive assessment. Passive assessments are performed by monitoring and analyzing the network traffic without actively interacting with the target systems. In this case, Morris is sniffing the network traffic to gather information, which means he is not directly interacting with the systems (e.g., he is not logging into systems, scanning for vulnerabilities, or sending probes that could trigger responses). Instead, he is just observing the network. A passive vulnerability assessment typically involves capturing and analyzing data to infer the security posture of the organization without triggering any alarms or affecting the network.

From my point of view this answer is B Internal Assessment, it cannot be passive, it is inside the network and is doing sniffing, it must configure its interface in promiscuous mode and connect to a network point or a wireless network inside the organization, that is not passive at all.