GAQM Exam CPEH-001 Topic 7 Question 74 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 74
Topic #: 7

[All CPEH-001 Questions]

Windows LAN Manager (LM) hashes are known to be weak. Which of the following are known weaknesses of LM? (Choose three)

AConverts passwords to uppercase.

BHashes are sent in clear text over the network.

CMakes use of only 32 bit encryption.

DEffective length is 7 characters.

Show Suggested Answer

Suggested Answer: C

The order should be Passive information gathering, Network level discovery, Host scanning and Analysis of host scanning.

by France at Sep 04, 2023, 01:20 AM

Limited Time Offer

25%

Off

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Blair

3 months ago

Wait, the LM hash sends passwords in clear text? That's just asking for trouble! A, C, and D are bad enough, but B is the real nail in the coffin. Time to put this dinosaur out of its misery.

upvoted 0 times

Curt

2 months ago

Agreed, the 7 character limit is also a vulnerability.

upvoted 0 times

...

Kathrine

2 months ago

Definitely, using only 32 bit encryption is a major weakness.

upvoted 0 times

...

Delila

2 months ago

Yes, sending hashes in clear text is a big security risk.

upvoted 0 times

...

Izetta

3 months ago

Ah, the good ol' LM hash. A, C, and D are classic weaknesses. As for B, I hear the hackers like to have a little 'clear text' party over the network. Where's the fun in encrypting everything?

upvoted 0 times

Inocencia

1 months ago

B) Hashes are sent in clear text over the network.

upvoted 0 times

...

Kiley

1 months ago

D) Effective length is 7 characters.

upvoted 0 times

...

Freeman

2 months ago

C) Makes use of only 32 bit encryption.

upvoted 0 times

...

Belen

2 months ago

A) Converts passwords to uppercase.

upvoted 0 times

...

Deandrea

3 months ago

Haha, the LM hash is like a security Swiss cheese - full of holes! A, C, and D are spot on. As for B, I think I'll just stick my head in the sand on that one.

upvoted 0 times

...

Lavonda

3 months ago

Definitely A, C, and D. The LM hash is a relic from the past and has so many security flaws. I can't believe it's still in use in some systems!

upvoted 0 times

Eve

2 months ago

C) Makes use of only 32 bit encryption.

upvoted 0 times

...

Kanisha

2 months ago

A) Converts passwords to uppercase.

upvoted 0 times

...

Ivette

3 months ago

I also heard that LM only uses 32 bit encryption, which makes it vulnerable to attacks.

upvoted 0 times

...

Doretha

3 months ago

A, C, and D all seem to be correct weaknesses of LM hashes. I'm a bit unsure about B though. Aren't the hashes supposed to be encrypted when sent over the network?

upvoted 0 times