eJPT Password Attacks and Credential Testing 2

Question 1

A rainbow table attack is effective because it trades which resource for speed in password cracking?

Accepted Answer

CPU time for storage space

Answer

Network bandwidth for CPU cycles

Answer

Memory for computation time

Answer

Disk space for reduced memory

Question 2

Which technique adds a random value to a password before hashing to defend against rainbow table attacks?

Accepted Answer

Salting

Answer

Pepper

Answer

Stretching

Answer

Padding

Question 3

When using Hashcat to crack an NTLM hash, which hash type (-m) value should be specified?

Accepted Answer

-m 1000

Answer

-m 500

Answer

-m 1800

Answer

-m 100

Question 4

Which tool can extract NTLM password hashes from a Windows SAM database?

Accepted Answer

Mimikatz

Answer

John the Ripper

Answer

Netcat

Answer

Nmap

Question 5

What is a Pass-the-Hash (PtH) attack?

Accepted Answer

Using a captured NTLM hash to authenticate without knowing the plaintext password

Answer

Passing a hashed wordlist to Hashcat for cracking

Answer

Sending hashed traffic over an encrypted channel

Answer

Converting a hash from one algorithm to another

Question 6

Which Medusa command targets FTP on host 10.10.10.5 with user 'ftp' and a password list?

Accepted Answer

medusa -h 10.10.10.5 -u ftp -P passwords.txt -M ftp

Answer

medusa -t 10.10.10.5 -l ftp -w passwords.txt -s ftp

Answer

medusa -host 10.10.10.5 -user ftp -pass passwords.txt -module ftp

Answer

medusa -h 10.10.10.5 -U ftp -p passwords.txt -M ftp

Question 7

What does the rockyou.txt wordlist contain and where is it typically found on Kali Linux?

Accepted Answer

Passwords leaked from the RockYou breach; located at /usr/share/wordlists/rockyou.txt

Answer

Common usernames; located at /etc/wordlists/rockyou.txt

Answer

SSL certificates; located at /var/lib/rockyou.txt

Answer

MD5 hashes of common passwords; located at /opt/rockyou.txt