Free 312-50 Exam Braindumps
Ethical Hacker Certified Questions 191–195 (page: 40)

Updated On: 10-Feb-2026

How can you determine if an LM hash you extracted contains a password that is less than 8 characters long?

  1. There is no way to tell because a hash cannot be reversed
  2. The right most portion of the hash is always the same
  3. The hash always starts with AB923D
  4. The left most portion of the hash is always the same
  5. A portion of the hash will be all 0's

Answer(s): B

Explanation:

When looking at an extracted LM hash, you will sometimes observe that the right most portion is always the same. This is padding that has been added to a password that is less than 8 characters long.



When discussing passwords, what is considered a brute force attack?

  1. You attempt every single possibility until you exhaust all possible combinations or discover the password
  2. You threaten to use the rubber hose on someone unless they reveal their password
  3. You load a dictionary of words into your cracking program
  4. You create hashes of a large number of words and compare it with the encrypted passwords
  5. You wait until the password expires

Answer(s): A

Explanation:

Brute force cracking is a time consuming process where you try every possible combination of letters, numbers, and characters until you discover a match.



Which of the following are well know password-cracking programs?(Choose all that apply.

  1. L0phtcrack
  2. NetCat
  3. Jack the Ripper
  4. Netbus
  5. John the Ripper

Answer(s): A,E

Explanation:

L0phtcrack and John the Ripper are two well know password-cracking programs. Netcat is considered the Swiss-army knife of hacking tools, but is not used for password cracking



Password cracking programs reverse the hashing process to recover passwords. (True/False.)

  1. True
  2. False

Answer(s): B

Explanation:

Password cracking programs do not reverse the hashing process. Hashing is a one-way process. What these programs can do is to encrypt words, phrases, and characters using the same encryption process and compare them to the original password. A hashed match reveals the true password.



While examining audit logs, you discover that people are able to telnet into the SMTP server on port 25. You would like to block this, though you do not see any evidence of an attack or other wrong doing. However, you are concerned about affecting the normal functionality of the email server. From the following options choose how best you can achieve this objective?

  1. Block port 25 at the firewall.
  2. Shut off the SMTP service on the server.
  3. Force all connections to use a username and password.
  4. Switch from Windows Exchange to UNIX Sendmail.
  5. None of the above.

Answer(s): E

Explanation:

Blocking port 25 in the firewall or forcing all connections to use username and password would have the consequences that the server is unable to communicate with other SMTP servers. Turning of the SMTP service would disable the email function completely. All email servers use SMTP to communicate with other email servers and therefore changing email server will not help.



Viewing page 40 of 154
Viewing questions 196 - 200 out of 765 questions


Post your Comments and Discuss EC-Council 312-50 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!