Computer Hacking Forensic Investigator (CHFI) — Question 122

John and Hillary works at the same department in the company. John wants to find out Hillary's network password so he can take a look at her documents on the file server. He enables Lophtcrack program to sniffing mode. John sends Hillary an email with a link to Error! Reference source not found. What information will he be able to gather from this?

Answer options

• A. Hillary network username and password hash
• B. The SID of Hillary network account
• C. The SAM file from Hillary computer
• D. The network shares that Hillary has permissions

Correct answer: A

Explanation

The correct answer is A because when John enables the Lophtcrack program in sniffing mode and sends the email, he is attempting to capture Hillary's network username and password hash. Options B, C, and D do not directly relate to the outcome of using Lophtcrack in this scenario, as they refer to different types of information that would not be gathered through this method.