GCIH · Question #839
A consultant provides an organization with a report that contains their users' most popular passwords, data on password sharing, and a breakdown of password length by department. Which tool could gene
The correct answer is A. DPAT. DPAT (Domain Password Audit Tool) is specifically designed to parse password audit results and produce statistical HTML reports covering password popularity, reuse, and length breakdowns by organizational unit or department.
Question
A consultant provides an organization with a report that contains their users' most popular passwords, data on password sharing, and a breakdown of password length by department. Which tool could generate this report?
Options
- ADPAT
- BHashcat
- CYescrypt
- DLANMAN
How the community answered
(47 responses)- A96% (45)
- B2% (1)
- D2% (1)
Why each option
DPAT (Domain Password Audit Tool) is specifically designed to parse password audit results and produce statistical HTML reports covering password popularity, reuse, and length breakdowns by organizational unit or department.
DPAT takes cracked password hashes (typically from a domain audit) and correlates them with Active Directory data to produce detailed reports including the most commonly used passwords, which users share passwords, and password length statistics segmented by department or group. No other listed tool produces this kind of structured organizational reporting output.
Hashcat is a GPU-accelerated password cracking engine used to recover plaintext passwords from hashes - it does not generate organizational reporting or statistics.
Yescrypt is a modern memory-hard password hashing algorithm used for storing passwords securely, not a tool for auditing or reporting on password practices.
LANMAN (LM) is a legacy Windows password hashing scheme, not an auditing or reporting tool.
Concept tested: DPAT password audit reporting capabilities
Source: https://github.com/clr2of8/DPAT
Topics
Community Discussion
No community discussion yet for this question.