312-50V9 · Question #373
LM hash is a compromised password hashing function. Which of the following parameters describe LM Hash:?
The correct answer is B. I, II, and III. LM hash has multiple well-documented weaknesses including a 14-character password cap, case insensitivity via uppercase conversion, and splitting passwords into two independent 7-character halves.
Question
LM hash is a compromised password hashing function. Which of the following parameters describe LM Hash:?
Options
- AI
- BI, II, and III
- CII
- DI and II
- IThe maximum password length is 14 characters.
How the community answered
(28 responses)- B93% (26)
- C4% (1)
- D4% (1)
Why each option
LM hash has multiple well-documented weaknesses including a 14-character password cap, case insensitivity via uppercase conversion, and splitting passwords into two independent 7-character halves.
Selecting only statement I is incomplete because LM hash has additional documented vulnerabilities beyond the 14-character password limit.
LM hash is a legacy Windows authentication scheme with several critical weaknesses: passwords are capped at 14 characters, all characters are converted to uppercase before hashing making it case-insensitive, and the password is split into two independent 7-character segments each hashed separately with DES. All three statements accurately describe LM hash parameters, so only the answer including I, II, and III is complete and correct.
Selecting only statement II is incomplete because LM hash weaknesses span multiple parameters, not just one.
Selecting only statements I and II is incomplete because statement III also accurately identifies a structural weakness of the LM hash algorithm.
Concept tested: LM hash weaknesses and password storage parameters
Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/prevent-windows-store-lm-hash-password
Topics
Community Discussion
No community discussion yet for this question.