Objective 1.5 Exploiting Vulnerabilities in Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   Which statement best describes an online password cracking attack?

   • AIt requires physical access to the target system to extract password hashes.
   • BIt exploits a vulnerability in the authentication protocol to bypass password checks entirely.
   • CIt captures password hashes from network traffic and cracks them offline.
   • DIt attempts to authenticate to a live service by trying many username/password combinations.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which tool is commonly used for offline password cracking?

   • ATShark
   • BNmap
   • CJohn the Ripper
   • DHydra
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which command-line option in Hydra specifies the target service?

   • A-P
   • B-l
   • C-s
   • DThe service name is given as an argument (e.g., ssh, ftp)
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   What is the first step in an offline password cracking attack?

   • AObtaining password hashes from the target system or captured data
   • BSending login attempts to the target server
   • CPoisoning the ARP cache to intercept traffic
   • DInstalling a backdoor on the target system
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A security analyst needs to quickly parse a large pcap file to extract all HTTP POST requests that contain the string 'password=' and save the results to a text file for further analysis. The analyst wants to automate this task for future use. Which approach is most efficient?

   • AUse Hydra to analyze the pcap file
   • BWrite a Bash script that uses TShark to filter for HTTP POST requests and grep for 'password='
   • CUse Wireshark's GUI to manually filter and export the results
   • DUse John the Ripper to extract passwords from the pcap
   Reveal Solution Discussion Select an answer first