nerdexam
GIAC

GCIH · Question #831

Which of the following is a purpose that an auditor would obtain a copy of the /etc/passwd file when performing a password audit of a linux machine?

The correct answer is D. The file allows for account permission identification. The /etc/passwd file stores essential user account information such as username, user ID (UID), group ID (GID), user full name (GECOS), home directory, and default shell. This information is critical for identifying user accounts and their associated permissions and environment o

Reconnaissance, Scanning, and Enumeration

Question

Which of the following is a purpose that an auditor would obtain a copy of the /etc/passwd file when performing a password audit of a linux machine?

Options

  • AThe file allows for a brute force audit approach
  • BThe file identifies the type of password hashing used for each user
  • CThe file contains hashes needed for rainbow table cracking
  • DThe file allows for account permission identification

How the community answered

(30 responses)
  • B
    3% (1)
  • C
    7% (2)
  • D
    90% (27)

Explanation

The /etc/passwd file stores essential user account information such as username, user ID (UID), group ID (GID), user full name (GECOS), home directory, and default shell. This information is critical for identifying user accounts and their associated permissions and environment on the

Topics

#/etc/passwd#Linux user accounts#account permission identification#password auditing

Community Discussion

No community discussion yet for this question.

Full GCIH Practice