Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council 212-82 Exam - Topic 13 Question 66 Discussion

A text file containing sensitive information about the organization has been leaked and modified to bring down the reputation of the organization. As a safety measure, the organization did contain the MD5 hash of the original file. The file which has been leaked is retained for examining the integrity. A file named "Sensitiveinfo.txt" along with OriginalFileHash.txt has been stored in a folder named Hash in Documents of Attacker Machine-1. Compare the hash value of the original file with the leaked file and state whether the file has been modified or not by selecting yes or no.
B) Yes
A) No

EC-Council 212-82 Exam - Topic 13 Question 66 Discussion

Actual exam question for EC-Council's 212-82 exam
Question #: 66
Topic #: 13
[All 212-82 Questions]

A text file containing sensitive information about the organization has been leaked and modified to bring down the reputation of the organization. As a safety measure, the organization did contain the MD5 hash of the original file. The file which has been leaked is retained for examining the integrity. A file named "Sensitiveinfo.txt" along with OriginalFileHash.txt has been stored in a folder named Hash in Documents of Attacker Machine-1. Compare the hash value of the original file with the leaked file and state whether the file has been modified or not by selecting yes or no.

Show Suggested Answer Hide Answer
Suggested Answer: B

Yes is the answer to whether the file has been modified or not in the above scenario. A hash is a fixed-length string that is generated by applying a mathematical function, called a hash function, to a piece of data, such as a file or a message. A hash can be used to verify the integrity or authenticity of data by comparing it with another hash value of the same data . A hash value is unique and any change in the data will result in a different hash value . To compare the hash value of the original file with the leaked file and state whether the file has been modified or not, one has to follow these steps:

Navigate to Hash folder in Documents of Attacker-1 machine.

Open OriginalFileHash.txt file with a text editor.

Note down the MD5 hash value of the original file as 8f14e45fceea167a5a36dedd4bea2543

Open Command Prompt and change directory to Hash folder using cd command.

Type certutil -hashfile Sensitiveinfo.txt MD5 and press Enter key to generate MD5 hash value of leaked file.

Note down the MD5 hash value of leaked file as 9f14e45fceea167a5a36dedd4bea2543

Compare both MD5 hash values.

The MD5 hash values are different , which means that the file has been modified.


Contribute your Thoughts:

0/2000 characters
India
1 day ago
If the hash is different, it’s a clear yes.
upvoted 0 times
...
Rosann
6 days ago
I’m leaning towards yes. Hash comparison is key.
upvoted 0 times
...
Herman
12 days ago
No way it’s unchanged. Too much risk involved.
upvoted 0 times
...
Cecilia
17 days ago
I think it’s a yes. The hash will show changes.
upvoted 0 times
...
Virgie
22 days ago
Definitely modified. The reputation is at stake.
upvoted 0 times
...
Leonora
27 days ago
This is tricky. I feel like it could go either way.
upvoted 0 times
...
Verlene
1 month ago
But if it’s leaked, it’s probably been tampered with.
upvoted 0 times
...
Kimberely
1 month ago
I’d say no. If the hash matches, it’s untouched.
upvoted 0 times
...
Jackie
1 month ago
If the hash is different, it’s a clear yes.
upvoted 0 times
...
Freeman
2 months ago
I’m leaning towards yes. Hash comparison is key.
upvoted 0 times
...
Alpha
2 months ago
No way it’s unchanged. Too much risk involved.
upvoted 0 times
...
Galen
2 months ago
I think it’s a yes. The hash will show changes.
upvoted 0 times
...
Audria
2 months ago
Definitely modified. The reputation is at stake.
upvoted 0 times
...
Pearlie
2 months ago
This is tricky. I feel like it could go either way.
upvoted 0 times
...
Vi
2 months ago
I’m leaning towards yes too, something feels off here.
upvoted 0 times
...
Katlyn
3 months ago
No way, the original file should match the hash if it’s untouched.
upvoted 0 times
...
Alyce
3 months ago
Wait, how can we trust the MD5 hash? Isn't it easy to crack?
upvoted 0 times
...
Joaquin
3 months ago
I think it's a yes, the file must have been modified.
upvoted 0 times
...
Pura
3 months ago
The MD5 hash can definitely help verify file integrity.
upvoted 0 times
...
Pa
3 months ago
I’m a bit confused about MD5’s reliability, but if the hashes are the same, I guess we would select "No."
upvoted 0 times
...
Lashandra
5 months ago
I feel like if the leaked file has a different hash than the original, then it must have been modified.
upvoted 0 times
...
Marylou
5 months ago
I think we practiced something similar in class, but I’m not entirely sure how to compare the hashes correctly.
upvoted 0 times
...
Wai
5 months ago
I remember hashing algorithms like MD5 can be vulnerable, but if the hash matches, then the file should be unmodified, right?
upvoted 0 times
...

Save Cancel