nerdexam
EC-Council

312-39 · Question #126

312-39 Question #126: Real Exam Question with Answer & Explanation

The correct answer is B. Rainbow Table Attack. A Rainbow Table Attack involves using a precomputed table of hash values for every possible combination of characters for a given password policy. This table, known as a rainbow table, is then used to look up the corresponding plaintext password for a given hash value. The proces

Question

Identify the password cracking attempt involving a precomputed dictionary of plaintext passwords and their corresponding hash values to crack the password.

Options

  • ADictionary Attack
  • BRainbow Table Attack
  • CBruteforce Attack
  • DSyllable Attack

Explanation

A Rainbow Table Attack involves using a precomputed table of hash values for every possible combination of characters for a given password policy. This table, known as a rainbow table, is then used to look up the corresponding plaintext password for a given hash value. The process involves the following steps: Precomputation: Generate the rainbow table by computing hash values for all possible password combinations according to the password policy. Storage: Store these precomputed hash values in a table, associating each with its plaintext Lookup: When a hash value is obtained during a password cracking attempt, search the rainbow table for the corresponding plaintext password. Match: If a match is found, the plaintext password associated with the hash value is the cracked Rainbow tables are effective because they trade storage space for time, allowing for quicker password cracking compared to brute-force or dictionary attacks, which compute hash values on the including dictionary attacks, brute-force attacks, and rainbow table attacks. Specifically, the EC- Council Learning Paths and Skill Packs provide detailed insights into these techniques, emphasizing the use of rainbow tables as a method of cracking passwords by comparing precomputed hash values to those obtained from a system12. Additionally, EC-Council’s CyberQ platform offers practical exercises related to password cracking, including the use of rainbow tables2. 566/2012/Resources/presentations/2012/ topic7-final/report.pdf

Community Discussion

No community discussion yet for this question.

Full 312-39 Practice