Advanced Password Attacks GPEN Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In Hashcat, what does the mask '?u?l?l?l?d?d' represent?

   • AA lowercase letter followed by three uppercase letters and two digits
   • BAn uppercase letter, three lowercase letters, and two special characters
   • CFour letters and two digits in any case
   • DAn uppercase letter followed by three lowercase letters and two digits
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What does the prefix '$2y$' in a hash string typically indicate?

   • ASHA-256
   • Bbcrypt
   • CNTLM
   • DMD5
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which tool is commonly used for password cracking and supports GPU acceleration to speed up attacks?

   • AMetasploit
   • BNmap
   • CWireshark
   • DHashcat
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   You have captured a large number of bcrypt hashes from a Linux server. Your workstation has a high-end GPU, but the cracking speed is only 1,000 hashes per second. You need to test a 10-million-word dictionary with 50 rules. What is the most practical approach to complete this task in a reasonable time?

   • ASwitch to a faster hash algorithm by converting bcrypt to MD5
   • BUse Hashcat with the GPU and run the full dictionary with all rules
   • CUse John the Ripper with CPU-only mode to avoid GPU driver issues
   • DReduce the wordlist and rules based on password policy and OSINT
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a feature of John the Ripper that allows it to automatically detect many common hash types?

   • AIt requires the user to specify the exact hash type every time
   • BIt has a built-in hash identification mode
   • CIt can only crack Windows NTLM hashes
   • DIt only works with GPU acceleration
   Reveal Solution Discussion Select an answer first