nerdexam
GIAC

GCIH · Question #839

A consultant provides an organization with a report that contains their users' most popular passwords, data on password sharing, and a breakdown of password length by department. Which tool could gene

The correct answer is A. DPAT. DPAT (Domain Password Audit Tool) is specifically designed to parse password audit results and produce statistical HTML reports covering password popularity, reuse, and length breakdowns by organizational unit or department.

Vulnerability Exploitation & Privilege Escalation

Question

A consultant provides an organization with a report that contains their users' most popular passwords, data on password sharing, and a breakdown of password length by department. Which tool could generate this report?

Options

  • ADPAT
  • BHashcat
  • CYescrypt
  • DLANMAN

How the community answered

(47 responses)
  • A
    96% (45)
  • B
    2% (1)
  • D
    2% (1)

Why each option

DPAT (Domain Password Audit Tool) is specifically designed to parse password audit results and produce statistical HTML reports covering password popularity, reuse, and length breakdowns by organizational unit or department.

ADPATCorrect

DPAT takes cracked password hashes (typically from a domain audit) and correlates them with Active Directory data to produce detailed reports including the most commonly used passwords, which users share passwords, and password length statistics segmented by department or group. No other listed tool produces this kind of structured organizational reporting output.

BHashcat

Hashcat is a GPU-accelerated password cracking engine used to recover plaintext passwords from hashes - it does not generate organizational reporting or statistics.

CYescrypt

Yescrypt is a modern memory-hard password hashing algorithm used for storing passwords securely, not a tool for auditing or reporting on password practices.

DLANMAN

LANMAN (LM) is a legacy Windows password hashing scheme, not an auditing or reporting tool.

Concept tested: DPAT password audit reporting capabilities

Source: https://github.com/clr2of8/DPAT

Topics

#DPAT#password reporting#password analysis tool#password auditing

Community Discussion

No community discussion yet for this question.

Full GCIH Practice