Which file is described as containing the passwords themselves?

Prepare for the Certified Ethical Hacker Version 11 Exam with a comprehensive test featuring flashcards and multiple choice questions, each accompanied by hints and explanations to ensure a thorough understanding. Ace your ethical hacking exam with confidence!

Multiple Choice

Which file is described as containing the passwords themselves?

Explanation:
The main idea here is where credential data is stored on Unix-like systems. The shadow file is the place that holds the password hashes and related aging information used to verify logins. It’s designed to be readable only by root, which is why it’s described as containing the passwords themselves (in hashed form) because it’s the storage for the credential data the system actually uses during authentication. The other options don’t fit: /etc/passwd contains user account information and, on modern systems, not the actual password hashes; it is often readable by all users. Pwdump is a tool that dumps password hashes from Windows’ SAM database, not a file. Botnet Trojans are malware, not a storage location for credentials.

The main idea here is where credential data is stored on Unix-like systems. The shadow file is the place that holds the password hashes and related aging information used to verify logins. It’s designed to be readable only by root, which is why it’s described as containing the passwords themselves (in hashed form) because it’s the storage for the credential data the system actually uses during authentication. The other options don’t fit: /etc/passwd contains user account information and, on modern systems, not the actual password hashes; it is often readable by all users. Pwdump is a tool that dumps password hashes from Windows’ SAM database, not a file. Botnet Trojans are malware, not a storage location for credentials.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy