MENU
Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place. He also suspects that weak passwords are probably the norm throughout the company he is evaluating. Bob is familiar with password weaknesses and key loggers.
Which of the following options best represents the means that Bob can adopt to retrieve passwords from his clients hosts and servers?
Suggested Answer: A
Get Premium 312-50 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
TY
Ty
12 months ago
B is solid, but I’d lean towards A for a comprehensive approach.
RO
Ronald
12 months ago
Wait, can you really retrieve passwords like that? Sounds risky.
MA
Marshall
12 months ago
I think C is too extreme, not always hardware.
CA
Carry
1 year ago
Totally agree, hardware and software are key!
DO
Dottie
1 year ago
A is the best option, covers all bases.
BE
Ben
1 year ago
I recall that software keyloggers can be really effective, but I wonder if relying solely on them is a good idea, like option D suggests.
CE
Cecil
1 year ago
I feel like I’ve seen practice questions where hardware keyloggers were emphasized, but I’m not entirely convinced that they’re the only way to go.
BU
Buffy
1 year ago
I think option A makes the most sense since it covers multiple methods, but I’m a bit confused about the effectiveness of sniffing in this context.
MA
Marquetta
1 year ago
I remember discussing how hardware and software can both be used to capture passwords, but I'm not sure if sniffing is really the best option here.
DI
Diane
1 year ago
Hmm, this seems straightforward. I think the answer is Asset and Image, since those are the two content types that can be used to provide product-related information to buyers.
YU
Yuette
1 year ago
This seems like a straightforward ethical question. I'll need to carefully consider the options and choose the one that best aligns with ethical standards.
PA
Page
1 year ago
Option C looks interesting - retrieving the credentials from the instance metadata. That could be a good way to avoid storing them in the application config. I'll have to think that one through a bit more.
LI
Lisandra
1 year ago
I'm a bit confused by the benchmark YTM information. Does that mean the G-Sec rate has changed? I'll need to double-check the relationship between bond prices, yields, and interest rates to make sure I'm on the right track.
XU
Xuan
1 year ago
Okay, let me break this down. A multi-homed firewall needs to have at least two network interfaces, one for the external network and one for the internal network. So the minimum number of connections would be 4, right?