A company has contracted with a network security firm to help identify the vulnerabilities of the corporate network. The firm sends a team to perform penetration tests to the company network. Why would the team use applications such as John the Ripper,THC Hydra, RainbowCrack, and Medusa?
- to capture and analyze packets within traditional Ethernet LANs or WLANs
- to probe and test the robustness of a firewall by using specially created forged packets
- to make repeated guesses in order to crack a password
Explanation: Applications such as John the Ripper, THC Hydra, RainbowCrack, and Medusa are specifically categorized as password crackers. These tools are used during penetration tests to recover or discover critical system passwords by repeatedly making guesses or by bypassing data encryption. Identifying weak or compromised passwords is a vital part of a security assessment because they can provide threat actors with easy access to valuable corporate data.
Related exam: CCNA 3 v7 Course Final Exam Answers
