Which countermeasure is most effective at preventing rainbow table attacks?

Using a shorter password length

Using a unique salt for each password

Disabling password hashing entirely

What is a key advantage of an offline password attack over an online attack?

It is always faster than an online attack

It can be used against any service without prior access

It does not require any password hashes to be obtained first

It can be performed without the risk of locking out the target account

What is the main difference between a brute-force attack and a dictionary attack?

Brute-force only works offline, while dictionary works online

Brute-force tries all possible character combinations, while dictionary uses a predefined list of likely passwords

Dictionary attacks are always successful, while brute-force attacks often fail

Brute-force uses a wordlist, while dictionary tries random characters

A company's Linux server stores user passwords in /etc/shadow. An auditor warns that the hashes are vulnerable to rainbow table attacks. Which remediation is most effective to mitigate this specific threat?

Switch to a per-user random salt in the hash

Enforce a minimum password length of 12 characters

Use a faster hashing algorithm to improve login performance

Disable password authentication and rely on SSH keys

EC-CouncilCertified Ethical Hacker

Domain 3Objective 2

Password Cracking and Attacks CEH Practice Questions (Page 1)

Part of the System Hacking Phases and Attack Techniques domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 2–3 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

8concepts

Questions 1–5

1foundation · easy
Which countermeasure is most effective at preventing rainbow table attacks?
Select an answer first
2foundation · easy
What is a key advantage of an offline password attack over an online attack?
Select an answer first
3foundation · easy
What is the main difference between a brute-force attack and a dictionary attack?
Select an answer first
4application · medium
A company's Linux server stores user passwords in /etc/shadow. An auditor warns that the hashes are vulnerable to rainbow table attacks. Which remediation is most effective to mitigate this specific threat?
Select an answer first
5foundation · easy
An attacker uses a wordlist of common passwords and tries each one against a captured hash. Which type of attack is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.