In which environment is a pass the hash attack most commonly seen?

Mobile devices using biometric authentication

Windows environments using NTLM authentication

Linux environments using SSH keys

A security analyst is reviewing a captured encrypted file that was transmitted over an internal network. The analyst knows the file begins with a standard header 'PK' (0x50 0x4B) and suspects the encryption is a weak proprietary algorithm. Which cryptanalytic approach would be most effective to attempt recovery of the plaintext?

Chosen-ciphertext attack by submitting the captured ciphertext to a decryption oracle

Known-plaintext attack using the known 'PK' header and corresponding ciphertext bytes

Ciphertext-only attack using statistical frequency analysis on the captured ciphertext

Brute force attack trying all possible keys, which is always feasible for any algorithm

Certified Information Systems Security Professional

Domain 3Objective 7

3.7 - Understand Methods of Cryptanalytic Attacks CISSP Practice Questions (Page 5)

Part of the Security Architecture and Engineering domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–2 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

13concepts

13%of the exam

Questions 21–25

21foundation · easy
Which attack involves extracting a service account's password hash from a Kerberos ticket to attempt offline cracking?
Select an answer first
22foundation · easy
Which attack scenario gives the attacker the most power to recover the key or plaintext?
Select an answer first
23foundation · easy
In which environment is a pass the hash attack most commonly seen?
Select an answer first
24application · medium
A security analyst is reviewing a captured encrypted file that was transmitted over an internal network. The analyst knows the file begins with a standard header 'PK' (0x50 0x4B) and suspects the encryption is a weak proprietary algorithm. Which cryptanalytic approach would be most effective to attempt recovery of the plaintext?
Select an answer first
25foundation · easy
Which attack technique involves measuring the power consumption of a cryptographic device to reveal secrets?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

3.7 - Understand Methods of Cryptanalytic Attacks CISSP Practice Questions (Page 5)

Questions 21–25

Which attack involves extracting a service account's password hash from a Kerberos ticket to attempt offline cracking?

Which attack scenario gives the attacker the most power to recover the key or plaintext?

In which environment is a pass the hash attack most commonly seen?

Which attack technique involves measuring the power consumption of a cryptographic device to reveal secrets?

Keep studying — Security Architecture and Engineering