ACE Password Recovery & Decryption 1

Question 1

Which AccessData tool is specifically designed for password recovery and works in conjunction with FTK?

Accepted Answer

PRTK (Password Recovery Toolkit)

Answer

MPE+ (Mobile Phone Examiner Plus)

Answer

AD Lab

Answer

Cerberus

Question 2

What is AccessData's DNA (Distributed Network Attack) feature primarily used for?

Accepted Answer

Distributing password cracking workloads across networked computers

Answer

Analyzing network traffic captures

Answer

Decrypting SSL/TLS communications

Answer

Managing distributed forensic case files

Question 3

In a dictionary attack, what is the primary source material used to attempt password recovery?

Accepted Answer

A predefined list of common words and phrases

Answer

All possible character combinations up to a set length

Answer

Previously known plaintext-ciphertext pairs

Answer

Precomputed hash values stored in tables

Question 4

What type of password attack attempts every possible combination of characters up to a specified length?

Accepted Answer

Brute force attack

Answer

Dictionary attack

Answer

Rule-based attack

Answer

Rainbow table attack

Question 5

What is a rainbow table in the context of password cracking?

Accepted Answer

A precomputed table of hash values mapped to their plaintext passwords

Answer

A color-coded matrix for organizing password complexity rules

Answer

A list of leaked passwords sorted by frequency

Answer

A GUI tool for visualizing password entropy

Question 6

What security mechanism makes rainbow table attacks significantly less effective?

Accepted Answer

Salting the password before hashing

Answer

Using a longer hashing algorithm

Answer

Encrypting the hash output

Answer

Storing passwords in base64 encoding

Question 7

When FTK identifies an encrypted file during processing, what is the recommended first step before attempting password recovery?

Accepted Answer

Check if the password or key material exists elsewhere in the image (e.g., swap file, registry)

Answer

Immediately begin a brute force attack

Answer

Export the file and use a third-party tool

Answer

Mark the file as inaccessible and note it in the report