A security auditor is testing password policy compliance. The auditor has a list of hashed passwords from a system that uses salted hashes. The auditor wants to identify weak passwords quickly, but the system uses a slow hashing algorithm (e.g., bcrypt). Which approach is most efficient?

Use a dictionary attack with a large wordlist and a rule-based mutation set

Use a brute force attack with all printable characters

Use a GPU-accelerated brute force attack

Which of the following is an example of passive reconnaissance?

Using Nmap to scan for open ports on a target server

Connecting to a shared drive to list files

Browsing the target organization's public website and social media profiles

Sending a ping sweep to identify live hosts

What is a brute force attack?

An attack that tricks users into revealing their passwords

An attack that uses precomputed hash tables to reverse password hashes

An attack that tries every possible combination of characters until the correct password is found

An attack that uses a list of common passwords and their variations

What is the primary purpose of a network security assessment?

To identify and evaluate vulnerabilities in a network before they can be exploited

To provide a legal defense against prosecution for security breaches

To replace the need for ongoing security monitoring and incident response

To guarantee that a network is completely immune to all cyber attacks

EC-CouncilCertified Cybersecurity Technician

Domain 3Objective 1

Network Security Assessment Techniques and Tools CCT Practice Questions (Page 8)

Part of the Security Assessment and Application Security domain, which makes up ~9% of our current practice bank.

49questions here

10free pages

12concepts

Questions 36–40

36foundation · easy
Which component of the Aircrack-ng suite is used to capture wireless packets?
Select an answer first
37expert · hard
A security auditor is testing password policy compliance. The auditor has a list of hashed passwords from a system that uses salted hashes. The auditor wants to identify weak passwords quickly, but the system uses a slow hashing algorithm (e.g., bcrypt). Which approach is most efficient?
Select an answer first
38foundation · easy
Which of the following is an example of passive reconnaissance?
Select an answer first
39foundation · easy
What is a brute force attack?
Select an answer first
40foundation · easy
What is the primary purpose of a network security assessment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.