In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Ripper, and running it against user accounts located by the application. The larger the word and word fragment selection, the more effective the dictionary attack is. The brute force method is the most inclusive, although slow. It usually tries every possible letter and number combination in its automated exploration.If you would use both brute force and dictionary methods combined together to have variation of words, what would you call such an attack?
Answer(s): C
A combination of Brute force and Dictionary attack is called a Hybrid attack or Hybrid dictionary attack.
What is the algorithm used by LM for Windows2000 SAM?
Answer(s): B
Okay, this is a tricky question. We say B, DES, but it could be A“MD4” depending on what their asking - Windows 2000/XP keeps users passwords not "apparently", but as hashes, i.e. actually as "check sum" of the passwords. Let's go into the passwords keeping at large. The most interesting structure of the complex SAM-file building is so called V-block. It's size is 32 bytes and it includes hashes of the password for the local entering: NT Hash of 16-byte length, and hash used during the authentication of access to the common resources of other computers LanMan Hash, or simply LM Hash, of the same 16-byte length.Algorithms of the formation of these hashes are following: NT Hash formation:LM Hash formation:
E-mail scams and mail fraud are regulated by which of the following?
Answer(s): A
http://www.law.cornell.edu/uscode/html/uscode18/usc_sec_18_00001030000-.html
Which of the following LM hashes represent a password of less than 8 characters? (Select 2)
Answer(s): B,E
Notice the last 8 characters are the same
Which of the following is the primary objective of a rootkit?
Actually the objective of the rootkit is more to hide the fact that a system has been compromised and the normal way to do this is by exchanging, for example, ls to a version that doesn’t show the files and process implanted by the attacker.
Post your Comments and Discuss EC-Council 312-50 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 312-50 content, but please register or login to continue.