Computer Hacking Forensic Investigator (CHFI v10) — Question 477

John and Hillary works at the same department in the company. John wants to find out Hillary's network password so he can take a look at her documents on the file server. He enables Lophtcrack program to sniffing mode. John sends Hillary an email with a link to Error! Reference source not found. What information will he be able to gather from this?

Answer options

• A. Hillary network username and password hash
• B. The SID of Hillary network account
• C. The SAM file from Hillary computer
• D. The network shares that Hillary has permissions

Correct answer: A

Explanation

The correct answer is A because Lophtcrack in sniffing mode can capture and analyze network traffic, allowing John to obtain Hillary's username and password hash. The other options do not pertain to the capabilities of Lophtcrack in this context; for example, gathering the SID or SAM file requires different methods and access privileges.