Which countermeasure is most effective at preventing rainbow table attacks?

Encrypting the password database with a strong key

Using a unique salt for each password

Enforcing a minimum password length of 8 characters

Using a simple hashing algorithm like MD5

Which type of password is most likely to be cracked by a dictionary attack?

A password with a mix of uppercase, lowercase, digits, and symbols

A passphrase with multiple uncommon words

A random string of 16 characters

A penetration tester is assessing a web application that uses a simple hashing algorithm without salt. The tester has a list of common passwords and wants to see how many user accounts share the same weak password. Which technique would be most efficient for this assessment?

Use a rainbow table attack with a large keyspace

Use a brute-force attack over all possible 6-character passwords

Use a dictionary attack with a large wordlist and compare hashes

Use a rule-based attack with common substitutions

EC-CouncilEthical Hacking Essentials

Domain 2Objective 4

Password Cracking Techniques EHE Practice Questions (Page 8)

Part of the Malware and Password Attacks domain, which makes up ~14% of our current practice bank.

42questions here

9free pages

10concepts

Questions 36–40

36application · medium
A security analyst is explaining password cracking techniques to a junior team member. The analyst wants to illustrate a technique that is effective when the attacker has no prior knowledge of the password but has a list of common passwords. Which technique should the analyst describe?
Select an answer first
37foundation · easy
Which countermeasure is most effective at preventing rainbow table attacks?
Select an answer first
38foundation · easy
Which password storage mechanism is the most vulnerable to immediate compromise if an attacker gains access to the stored credentials?
Select an answer first
39foundation · easy
Which type of password is most likely to be cracked by a dictionary attack?
Select an answer first
40application · medium
A penetration tester is assessing a web application that uses a simple hashing algorithm without salt. The tester has a list of common passwords and wants to see how many user accounts share the same weak password. Which technique would be most efficient for this assessment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Password Cracking Techniques EHE Practice Questions (Page 8)

Questions 36–40

A security analyst is explaining password cracking techniques to a junior team member. The analyst wants to illustrate a technique that is effective when the attacker has no prior knowledge of the password but has a list of common passwords. Which technique should the analyst describe?

Which countermeasure is most effective at preventing rainbow table attacks?

Which password storage mechanism is the most vulnerable to immediate compromise if an attacker gains access to the stored credentials?

Which type of password is most likely to be cracked by a dictionary attack?

A penetration tester is assessing a web application that uses a simple hashing algorithm without salt. The tester has a list of common passwords and wants to see how many user accounts share the same weak password. Which technique would be most efficient for this assessment?

Keep studying — Malware and Password Attacks