Rainbow Tables and Password Cracking ECES Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which tool is specifically designed to crack Windows LAN Manager (LM) hashes using rainbow tables?

   • ARainbowCrack
   • BJohn the Ripper
   • Cophcrack
   • DHashcat
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   How are hash chains used to build a rainbow table?

   • ABy hashing a password once and storing the hash
   • BBy encrypting passwords with a symmetric cipher
   • CBy repeatedly applying hash and reduction functions to create a chain, then storing only the start and end points
   • DBy sorting all possible passwords and their hashes
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a 'collision' in the context of rainbow tables?

   • AThe reduction function produces a password outside the chosen set
   • BTwo different passwords produce the same hash
   • CThe table contains the same password multiple times
   • DTwo chains converge to the same value, causing redundant coverage
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security consultant is advising a client on password storage. The client currently uses unsalted SHA-256 and is concerned about rainbow table attacks. The consultant recommends using a key-stretching algorithm like bcrypt. Which benefit does bcrypt provide beyond simply using a longer hash like SHA-512?

   • ABcrypt automatically rotates the salt for each login, preventing replay attacks.
   • BBcrypt incorporates a salt and a configurable work factor that increases the computational cost of each hash attempt.
   • CBcrypt is a symmetric encryption algorithm that hides the hash from attackers.
   • DBcrypt produces a longer hash output, making collisions less likely.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   When generating a rainbow table for a specific password set, which of the following must be defined?

   • AThe network protocol used to distribute the table
   • BThe reduction function and the chain length
   • CThe encryption key used to protect the table
   • DThe operating system of the target system
   Reveal Solution Discussion Select an answer first