Consider a password based authentication system. Password testing is performed to check if the user can login using easy passwords. Upon successful login the program might mail or write a success message the sys admin. This testing is active testing. Passive testing in this case, involves testing of the password file protection and comparing the encrypted strings.