Using Lophtcrack in sniffing mode, what information can be gathered about a target's account?

Enhance your knowledge as a Computer Hacking Forensic Investigator with the CHFI v11 Test. Use flashcards and multiple-choice questions, complete with hints and detailed explanations, to prepare effectively and ace your exam!

Multiple Choice

Using Lophtcrack in sniffing mode, what information can be gathered about a target's account?

Explanation:
The key idea here is what data is exposed in transit when using Lophtcrack in sniffing mode. This mode watches network traffic and captures credentials as they’re sent during authentication. In Windows-style logon exchanges, the username is transmitted and the authentication response often includes a password hash (LM/NTLM). Lophtcrack can collect that username and the corresponding hash from the network traffic, which is why this option is the best answer. It cannot pull the SAM file from Hillary’s computer—that local database lives on the target machine and isn’t transmitted over the network. It also doesn’t directly reveal the account’s SID or list the network shares the user has permissions to; those require separate discovery actions, not just sniffing credentials.

The key idea here is what data is exposed in transit when using Lophtcrack in sniffing mode. This mode watches network traffic and captures credentials as they’re sent during authentication. In Windows-style logon exchanges, the username is transmitted and the authentication response often includes a password hash (LM/NTLM). Lophtcrack can collect that username and the corresponding hash from the network traffic, which is why this option is the best answer. It cannot pull the SAM file from Hillary’s computer—that local database lives on the target machine and isn’t transmitted over the network. It also doesn’t directly reveal the account’s SID or list the network shares the user has permissions to; those require separate discovery actions, not just sniffing credentials.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy