nerdexam
EC-Council

312-49V9 · Question #247

John and Hillary works at the same department in the company. John wants to find out Hillary's network password so he can take a look at her documents on the file server. He enables Lophtcrack…

The correct answer is D. Hillary network username and password hash. Note: From the question, we would have to assume that John is not the Administrator, since he needs to run L0phtcrack in sniffing mode. But what if the company is using switches instead of Hubs? John would either try to degarde the switch or perform a man in the middle attack.

Network Forensics

Question

John and Hillary works at the same department in the company. John wants to find out Hillary's network password so he can take a look at her documents on the file server. He enables Lophtcrack program to sniffing mode. John sends Hillary an email with a link to Error! Reference source not found. What information will he be able to gather from this?

Options

  • AThe SID of Hillary network account
  • BThe SAM file from Hillary computer
  • CThe network shares that Hillary has permissions
  • DHillary network username and password hash

How the community answered

(30 responses)
  • A
    13% (4)
  • B
    7% (2)
  • C
    3% (1)
  • D
    77% (23)

Explanation

Note: From the question, we would have to assume that John is not the Administrator, since he needs to run L0phtcrack in sniffing mode. But what if the company is using switches instead of Hubs? John would either try to degarde the switch or perform a man in the middle attack.

Topics

#password hash capture#LOphtCrack#NTLM hash#network sniffing

Community Discussion

No community discussion yet for this question.

Full 312-49V9 Practice