GIAC Certified Incident Handler (GCIH) — Question 29

What hash type is being cracked in the command below?

hashcat -m 1800 -a 0 customer.ntds wordlist.txt --potfile-path ./hashcat.potfile

Answer options

• A. SHA-1
• B. LANMAN
• C. SHA-512
• D. NT hashes

Correct answer: D

Explanation

The command specified uses the hash type -m 1800, which corresponds to NT hashes. The other options refer to different hash types that are not applicable to the command used, such as SHA-1, LANMAN, and SHA-512.