MENU
Windows LAN Manager (LM) hashes are known to be weak. Which of the following are known weaknesses of LM? (Choose three)
Suggested Answer: C
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The order should be Passive information gathering, Network level discovery, Host scanning and Analysis of host scanning.
37 comments · newest first
RO
Ronny
11 months ago
Effective length of 7 characters is just ridiculous!
PA
Paulene
11 months ago
I think B is a bit misleading, they aren't always sent in clear text.
LE
Lezlie
12 months ago
Wait, they convert passwords to uppercase? That's wild!
AI
Aide
12 months ago
Totally agree, LM hashes are super outdated.
RO
Roslyn
12 months ago
A, C, and D are definitely weaknesses.
RE
Reyes
1 year ago
I feel like I read somewhere that LM hashes are sent in clear text, but I can't recall if that's one of the main weaknesses.
BO
Bobbie
1 year ago
I practiced a question similar to this, and I think one of the weaknesses is that they use 32-bit encryption, which is pretty outdated.
WI
William
1 year ago
I’m not entirely sure, but I think the effective length of LM hashes is only 7 characters, which is a huge weakness.
LU
Ludivina
1 year ago
I remember that LM hashes convert passwords to uppercase, which really limits the complexity.
RE
Renato
1 year ago
I've studied this topic before, so I think I've got a good handle on it. The key things to remember are that LM hashes are case-insensitive and use very weak encryption. I'm feeling good about this one.
RO
Rosendo
1 year ago
Hmm, I'm not too sure about this one. I know LM hashes are weak, but I can't remember all the specific weaknesses. I'll have to think this through carefully.
LE
Lenna
1 year ago
This question seems straightforward. I'm pretty confident I can identify the three known weaknesses of LM hashes.
LA
Lauran
1 year ago
Okay, let's see. I know LM converts passwords to uppercase, which is a major weakness. And I think it uses a really short encryption key length too. I'll have to double-check the other options.
AL
Alpha
1 year ago
Hmm, this is a tricky one. I'll need to think through the characteristics of each pattern and how the Service Agent pattern might be used to address them.
CO
Cornell
1 year ago
Satellites definitely don't use 4G/LTE or 2G/2.5G, so those are out. I'm leaning towards L-band, but I'll double-check my notes just to be sure.
CR
Crista
1 year ago
I think IVR System Prompts are definitely included in the auto-install, but I might be mixing it up with another question about device setup.
BL
Blair
1 year ago
Wait, the LM hash sends passwords in clear text? That's just asking for trouble! A, C, and D are bad enough, but B is the real nail in the coffin. Time to put this dinosaur out of its misery.
CU
Curt
1 year ago
Agreed, the 7 character limit is also a vulnerability.
KA
Kathrine
1 year ago
Definitely, using only 32 bit encryption is a major weakness.
DE
Delila
1 year ago
Yes, sending hashes in clear text is a big security risk.
IZ
Izetta
2 years ago
Ah, the good ol' LM hash. A, C, and D are classic weaknesses. As for B, I hear the hackers like to have a little 'clear text' party over the network. Where's the fun in encrypting everything?
IN
Inocencia
1 year ago
B) Hashes are sent in clear text over the network.
KI
Kiley
1 year ago
D) Effective length is 7 characters.
FR
Freeman
1 year ago
C) Makes use of only 32 bit encryption.
BE
Belen
1 year ago
A) Converts passwords to uppercase.
DE
Deandrea
2 years ago
Haha, the LM hash is like a security Swiss cheese - full of holes! A, C, and D are spot on. As for B, I think I'll just stick my head in the sand on that one.
LA
Lavonda
2 years ago
Definitely A, C, and D. The LM hash is a relic from the past and has so many security flaws. I can't believe it's still in use in some systems!
EV
Eve
1 year ago
C) Makes use of only 32 bit encryption.
KA
Kanisha
1 year ago
A) Converts passwords to uppercase.
IV
Ivette
2 years ago
I also heard that LM only uses 32 bit encryption, which makes it vulnerable to attacks.
DO
Doretha
2 years ago
A, C, and D all seem to be correct weaknesses of LM hashes. I'm a bit unsure about B though. Aren't the hashes supposed to be encrypted when sent over the network?
CR
Craig
1 year ago
B) Hashes are sent in clear text over the network.
EL
Elbert
1 year ago
D) Effective length is 7 characters.
CA
Carin
1 year ago
C) Makes use of only 32 bit encryption.
BL
Blair
2 years ago
A) Converts passwords to uppercase.
DO
Dortha
2 years ago
Yeah, that's true. Another weakness is that the hashes are sent in clear text over the network.
IV
Ivette
2 years ago
I think one weakness of LM is that it converts passwords to uppercase.