GCIH: GIAC Certified Incident HandlerDemo

By GIAC · Question Mode

QuestionQ757

Understanding Passwords

Which file would an attacker have to read to crack passwords on a modern Linux system?

  • A /etc/passwd
  • B /usr/sbin/adduser
  • C %systemroot%\NTDS\NTDS.dit
  • D /etc/shadow
Explanation

Modern Linux systems store users’ password hashes in /etc/shadow; obtaining those hashes enables offline password-cracking attempts. /etc/passwd normally does not contain the hashes, and NTDS.dit is associated with Windows Active Directory.

Community Discussion

No comments yet. Be the first to start the discussion!