312-50V13 Question #36: Real Exam Question with Answer & Explanation

Question

You have gained physical access to a Windows 2008 R2 server which has an accessible disc drive. When you attempt to boot the server and log in, you are unable to guess the password. In your toolkit, you have an Ubuntu 9.10 Linux LiveCD. Which Linux-based tool can change any user's password or activate disabled Windows accounts?

Options

• AJohn the Ripper
• BSET
• CCHNTPW
• DCain & Abel

Explanation

This question asks for a specific Linux-based tool that can reset Windows user passwords or activate disabled accounts from a LiveCD environment.

Common mistakes.

• A. John the Ripper is a password cracking tool that attempts to guess passwords from hashes, but it does not directly reset passwords or activate accounts within the Windows SAM database.
• B. SET (Social-Engineer Toolkit) is a framework for social engineering attacks, not a direct password reset utility for physically accessing and modifying a Windows system's SAM file.
• D. Cain & Abel is a Windows-based password recovery and network sniffing tool, and thus cannot be used from a Linux LiveCD as specified in the question.

Concept tested. Windows password reset tool (CHNTPW)

Reference. https://manpages.ubuntu.com/manpages/jammy/man8/chntpw.8.html

No community discussion yet for this question.