EH 8.1.15

You have just run the John the Ripper command shown in the image. Which of the following was this command used for?

• To extract the password and save it in the secure.txt file.

• To extract the password and save it in a rainbow table named secure.txt.

• To extract the password from a rainbow hash and save it in the secure.txt file.

• To extract the password hashes and save them in the secure.txt file.

Carl received a phone call from a woman who states that she is calling from his bank. She tells him that someone has tried to access his checking account and she needs him to confirm his account number and password to discuss further details. He gives her his account number and password.

Which of the following types of non-technical password attack has occurred?

• Shoulder surfing

• Social engineering

• Dumpster diving

• Password guessing

You are cleaning your desk at work. You toss several stacks of paper in the trash, including a sticky note with your password written on it. 

Which type of non-technical password attacks have you enabled?

(a)  

Which of the following best describes shoulder surfing?

• Someone nearby watches you enter your password on your computer and records it.

• Finding someone's password in the trash can and using it to access their account.

• Giving someone you trust your username and account password.

• Guessing someone's password because it is so common or simple.

Which of the following techniques involves adding random bits of data to a password before it is stored as a hash? 

• Password salting

• Pass the hash

• Keylogging

• Password sniffing

[ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~] are the possible values in which of the following hash types?

• Mix alpha-numeric

• Ascii-32-95

• Alpha-numeric-symbol32-space

• Ascii-32-65-123-4

Which of the following includes all possible characters or values for plaintext?

• table_index

• chain_num

• charset

• chain_len

Jack is tasked with testing the password strength for the users of an organization. He has limited time and storage space.

Which password attack would be best for him to choose?

(a)  

You have created and sorted an md5 rainbow crack table. You want to crack the password.

Which of the following commands would you use to crack a single hash?

• rcrack . -l /root/hashes.txt

• rtgen md5 ascii-32-95 1 20 0 1000 1000 0

• rtgen sha1 ascii-32-95 1 20 0 1000 1000 0

• rcrack . -h 202cb962ac59075b964b07152d234b70

You are using a password attack that tests every possible keystroke for each single key in a password until the correct one is found.

What technical password attack are you using?

(a)