You have retrieved the raw hash values from a Windows 2000 Domain Controller. Using social engineering, you come to know that they are enforcing strong passwords. You understand that all users are required to use passwords that are at least 8 characters in length. All passwords must also use 3 of the 4 following categories: lower case letters, capital letters, numbers and special characters. With your existing knowledge of users, likely user account names and the possibility that they will choose the easiest passwords possible, what would be the fastest type of password cracking attack you can run against these hash values and still get results?

• A.Dictionary Attack
• B.Online Attack
• C.Hybrid Attack
• D.Brute Force Attack

Comment: *

Name: *

Email: *

Verification: *

What does the option * indicate?

• A.n
• B.t
• C.s
• D.a

Comment: *

Name: *

Email: *

Verification: *

In cryptanalysis and computer security, 'pass the hash' is a hacking technique that allows an attacker to authenticate to a remote server/service by using the underlying NTLM and/or LanMan hash of a user's password, instead of requiring the associated plaintext password as is normally the case.
Metasploit Framework has a module for this technique: psexec. The psexec module is often used by penetration testers to obtain access to a given system that you already know the credentials for. It was written by sysinternals and has been integrated within the framework. Often as penetration testers, successfully gain access to a system through some exploit, use meterpreter to grab the passwords or other methods like fgdump, pwdump, or cachedump and then utilize rainbowtables to crack those hash values.
Which of the following is true hash type and sort order that is using in the psexec module's 'smbpass'?

• A.LM:NT
• B.NTLM:LM
• C.NT:LM
• D.LM:NTLM

Comment: *

Name: *

Email: *

Verification: *

Why would an attacker want to perform a scan on port 137?

• A.To check for file and print sharing on Windows systems
• B.To disrupt the NetBIOS SMB service on the target host
• C.To discover information about a target host using NBTSTAT
• D.To discover proxy servers on a network

Comment: *

Name: *

Email: *

Verification: *

Steve, a scientist who works in a governmental security agency, developed a technological solution to
identify people based on walking patterns and implemented this approach to a physical control access.
A camera captures people walking and identifies the individuals using Steve's approach.
After that, people must approximate their RFID badges. Both the identifications are required to open the
door.
In this case, we can say:

• A.The solution will have a high level of false positives
• B.Although the approach has two phases, it actually implements just one authentication factor
• C.Biological motion cannot be used to identify people
• D.The solution implements the two authentication factors: physical object and physical characteristic

Comment: *

Name: *

Email: *

Verification: *