lab 7

Question 1

Which two accounts are using the same password?

Jaime
Admin
Alex
Jordan
Logan

Answer 1

Jaime
Admin

Question 2

What domain password policy settings are currently defined? (Select all that apply)

ComplexityEnabled: True
LockoutDuration: 00:15:00
LockoutThreshold: 0
MaxPasswordAge: 42
MinPasswordAge: 3
MinPasswordLength: 7

Answer 2

ComplexityEnabled: True
LockoutThreshold: 0
MaxPasswordAge: 42
MinPasswordLength: 7

Question 2

What is password spraying?

Trying a known password against many user accounts

Guessing a password for a user account

Extracting password hashes for user accounts

Trying numerous combinations of characters to discover a password

Answer 2

Trying a known password against many user accounts

Question 3

What security measure is a password spraying attack attempting to avoid or bypass?

Account lockout
Maximum password age
Minimum password length
Complexity requirements

Answer 3

Account lockout

Question 4

What is the primary factor that determines the likelihood of success of dictionary password cracking?

size of the dictionary file
length of the password
complexity of the password
age of the password
account lockout

Answer 4

size of the dictionary file

Question 5

What aspects of a target’s password are a defense against brute force password cracking? (Select all that apply)

greater age
longer length
ease to pronounce
increased complexity
using well-known algorithms

Answer 5

longer length
increased complexity

Question 6

Which domain password policy settings has the greatest impact on strength (i.e., resistance to brute force attacks)?

MinPasswordLength
ComplexityEnabled
MaxPasswordAge
PasswordHistoryCount

Answer 6

MinPasswordLength