MENU
One of your junior administrator is concerned with Windows LM hashes and password cracking. In your discussion with them, which of the following are true statements that you would point out?
Select the best answers.
Suggested Answer: C
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The order should be Passive information gathering, Network level discovery, Host scanning and Analysis of host scanning.
40 comments · newest first
AN
Antonio
11 months ago
Complex passwords are a must! They really help against cracking attempts.
OL
Olga
11 months ago
Wait, are we really still using LM hashes? That’s surprising!
HE
Henriette
11 months ago
SYSKEY is decent, but I’m not convinced it’s foolproof.
CA
Cammy
12 months ago
Totally agree, NTLMV1 is not a solid defense anymore.
AS
Ashleigh
12 months ago
John the Ripper is great for cracking, but yeah, it doesn’t show case sensitivity.
LA
Laurena
12 months ago
I definitely remember that enforcing complex passwords is crucial. It’s one of the best practices we discussed in class!
BR
Brett
1 year ago
SYSKEY sounds familiar as a countermeasure, but I can't recall if it's still considered secure today.
LU
Luz
1 year ago
I think NTLMV1 is outdated and not really effective against modern attacks. I might lean towards NTLMV2 instead.
BL
Blondell
1 year ago
I remember studying that John the Ripper is powerful, but I’m not sure about the case sensitivity issue. Does it really not show that?
KI
Kiley
1 year ago
Hmm, the output limitation of John the Ripper is an interesting detail. I'll make sure to select that one since it's a specific weakness of that tool.
AL
Alesia
1 year ago
The password complexity requirement seems like a solid strategy to prevent cracking. I'm pretty confident that's a good answer, but I'll double-check the other options as well.
MI
Micheline
1 year ago
I'm a bit confused about the NTLMV1 and SYSKEY options. I'll need to review those concepts to determine if they are effective countermeasures or not.
SE
Selma
1 year ago
Okay, let's go through this step-by-step. The question is asking about true statements related to Windows LM hashes and password cracking, so I'll focus on understanding the countermeasures mentioned.
KA
Katina
1 year ago
This question seems straightforward, but I want to make sure I understand the key points about LM hashes and password cracking before selecting the best answers.
UL
Ulysses
1 year ago
Okay, let's see - inventory data sources, review network topology, those sound like good steps. I'll mark those.
PA
Patria
1 year ago
This question seems straightforward, I think the answer is B - Alter the layout of iViews as they appear on a workspace.
DU
Dudley
1 year ago
I think the multicast Reverse Path Forwarding check is used to create a loop-free distribution tree from the source to the receivers. That sounds like option A to me.
FA
Farrah
1 year ago
Alright, I've got a few ideas. Lowering the tunnel MTU could help with the connection issues, or adjusting the IPSec replay window might do the trick.
MA
Maryann
1 year ago
Complex passwords, you say? Sounds like a real party trick to keep the hackers at bay. I'll make sure my team knows the drill - upper, lower, numbers, and special chars. Bring it on!
CL
Clement
1 year ago
7 characters or less, huh? Yikes, that's like leaving the keys in the car with a 'Free Candy' sign on it. Time to beef up those Windows passwords, folks!
MI
Ming
1 year ago
7 characters or less? Definitely time to beef up those Windows passwords!
LA
Lang
1 year ago
E) Enforcing Windows complex passwords is an effective countermeasure.
NO
Norah
1 year ago
A) John the Ripper can be used to crack a variety of passwords, but one limitation is that the output doesn't show if the password is upper or lower case.
AR
Arlean
1 year ago
SYSKEY, huh? Sounds like a real heavyweight champion in the password protection arena. I'll have to give that a try.
DO
Douglass
1 year ago
Enforcing complex passwords is also important for security.
LA
Laura
1 year ago
Yes, it uses 128 bit encryption on the local copy of the Windows SAM.
MA
Maurine
1 year ago
SYSKEY is a great tool for password protection.
VE
Vernice
1 year ago
NTLMV1? Really? That's like putting a Band-Aid on a gunshot wound. Time to upgrade to NTLMV2 and put those password crackers in their place!
LA
Lavonne
1 year ago
NTLMV1? Really? That's like putting a Band-Aid on a gunshot wound. Time to upgrade to NTLMV2 and put those password crackers in their place!
BE
Bettina
1 year ago
E) Enforcing Windows complex passwords is an effective countermeasure.
DE
Denae
1 year ago
B) BY using NTLMV1, you have implemented an effective countermeasure to password cracking.
AN
Annelle
1 year ago
A) John the Ripper can be used to crack a variety of passwords, but one limitation is that the output doesn't show if the password is upper or lower case.
TW
Twila
2 years ago
I think option B is the best answer. Using NTLMV1 is a good countermeasure to password cracking.
EN
Ena
2 years ago
I agree with you, Nakisha. But I also believe that enforcing Windows complex passwords is an effective countermeasure.
BR
Brett
2 years ago
John the Ripper is a beast! But I'm a little bummed the output doesn't show case sensitivity. Guess I'll have to do some extra work to figure that out.
DA
Darrin
1 year ago
User 2
BE
Bernardo
1 year ago
User 1
CE
Celia
1 year ago
E) Enforcing Windows complex passwords is an effective countermeasure.
FA
Farrah
1 year ago
A) John the Ripper can be used to crack a variety of passwords, but one limitation is that the output doesn't show if the password is upper or lower case.
NA
Nakisha
2 years ago
I think option A is true because John the Ripper doesn't show if the password is upper or lower case.