stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Ethical Hacking 4 Brute-Force Flashcards | StudBud
Explore
/
Ethical Hacking 4 Brute-Force
Ethical Hacking 4 Brute-Force
31 terms
·
StudBud Administration
·
92 plays
Imported from external platform
Flashcards
31 cards
F
Practice quiz
P
Host live
L
Questions
31
Answers
1
Passwords are strings of characters used to what?
encrypt and authenticate digital resources
involve actual cracking
shouldn't be changed
protect transmitted or stored data against tampering
2
The MD5 hash algorithm is considered secure.
True
False
3
GPU cracking is done on graphic cards that support CUDA or OpenCL.
False
True
4
A complex password includes all but what?
lowercase letters
numbers
emoji
uppercase letters
5
Hashing algorithms do not perform additional mathematical operations on a password before saving it to the disk.
False
True
6
Limiting the number of consecutive login attempts is a poor defense against remote attacks.
False
True
7
What is a cross-platform tool claiming to be the fastest password cracking utility?
Crunch
Hashcat
Hydra
CUPP
8
If you need to create a dictionary based on the site’s content, what tool would you use?
CeWL
Medusa
Ncrack
CUPP
9
What are the main weaknesses of hash algorithms? (2 answers)
division
collision
duplication
inversion
10
What is a personalized dictionary creation tool written in Python?
Hydra
CUPP
Scareware
Medusa
11
What can run checks of passwords against large collections in a matter of milliseconds & use powerful dedicated servers?
HASH Cracker
HASH Dominator
HASH Smacker
HASH Quacker
12
rar2john is an online tool used to crack what?
password-protected files that are bundled in RAR or zip files
can crack passwords using powerful dedicated servers instead of scripts
personalized passwords that together form a password dictionary
default password files that are bundled in RAR or zip files
13
What is true about Default Passwords? (2 answers)
cannot be cracked
published as default credentials to access a system
easy to guess
not changing them leads to greater security
14
Sixteen-digit passwords, once considered secure, are easily cracked today
False
True
15
What is a much-improved version of JtR that also does GPU-based computation?
John-Jumbo
Jumbo the Ripper
Jumbo-Jack
Juan-Jumbo
16
What tool is a common password generator that creates passwords based on length and charsets?
CUPP
Ncrack
Crunch
CeWL
17
Getting a user to reveal a password via a phony website requires much less effort than trying to crack it.
False
True
18
Rar2john can be combined with brute-force to crack what type of files? (3 answers)
EXE
PDF
RAR
ZIP
19
What method of attack is the slowest method?
Dictionary
preimage
Brute-force
mutated dictionary attack
20
What attacks are the most common and easiest attack to perform on a hashed password or login service?
Dictionary
preimage
collision
Brute-force
21
Which example of hashing uses salting and timestamps to prevent PTH?
MD5
SHA-256
NetNTLM
PBKDF2
22
What is true about Hashing? (2 answers)
can protect transmitted or stored data against tampering
can be generated to perform accessability
one-way attribute
are a type of encryption
23
A value's hash will always be the same as long as the same algorithm is used, no matter the platform.
False
True
24
What Linux tool that supports various attack options, including hybrid attacks?
RtJ
TjR
TrJ
JtR
25
A combination of prime factorization and modulation renders a hash function irreversible.
True
False
26
Fail2Ban acts as an IPS that examines system logs and failed login attempts.
True
False
27
The cracking speed of a password can be impacted by what? (2 answers)
Social Engineering
hardware that performs the calculation process
NetNTLM
difficulty of the algorithm
28
What is true about Rainbow tables? (2 answers)
contain non pre-computed hashes of certain values
used to perform reverse cryptography on hash functions
slower than other brute-force attacks
faster than other brute-force attacks
29
What attacks are the most common against online services (SSH, RDP, & FTP logins) and include pseudo-random numbers?
mutated dictionary attack
Brute-force
collision
cryptanalytic
30
What Brute-Force cracking tools are used for parallel connections and use wordlists? (2 answers)
CUPP
Hydra
Medusa
Crunch
31
What is not true about Ncrack?
has built-in support for Nmap output formats
a brute-force tool that targets small and large networks
the largest supporter of protocols
the fastest and most reliable tool for remote authentication
