nerdexam
EC-Council

EC0-350 · Question #248

A corporation hired an ethical hacker to test if it is possible to obtain users' login credentials using methods other than social engineering. Access to offices and to a network node is granted…

The correct answer is D. Capture administrators RDP traffic and decode it with Cain and Abel. See the full explanation below for the reasoning.

Question

A corporation hired an ethical hacker to test if it is possible to obtain users' login credentials using methods other than social engineering. Access to offices and to a network node is granted. Results from server scanning indicate all are adequately patched and physical access is denied, thus, administrators have access only through Remote Desktop. Which technique could be used to obtain login credentials?

Options

  • ACapture every users' traffic with Ettercap.
  • BCapture LANMAN Hashes and crack them with LC6.
  • CGuess passwords using Medusa or Hydra against a network service.
  • DCapture administrators RDP traffic and decode it with Cain and Abel.

How the community answered

(31 responses)
  • A
    10% (3)
  • B
    3% (1)
  • C
    3% (1)
  • D
    84% (26)

Community Discussion

No community discussion yet for this question.

Full EC0-350 Practice