What is the most likely reason a user cannot capture logons using L0phtcrack on a Windows 2000 network?

• A. Kerberos is preventing it.
• B. L0phtcrack is incompatible with Windows 2000.
• C. The network uses WEP.
• D. The logons are encrypted with AES.

Answer: (A)

When password hashes are needed for cracking, tools like L0phtcrack rely on obtaining those hashes from the system (NTLM/LM hashes from SAM or captured traffic). In a Windows 2000 domain that uses Kerberos for authentication, logon requests don’t send password hashes over the network. Instead, the user’s credentials are validated via Kerberos tickets, which are encrypted and do not expose the password hash. Because there’s nothing to capture in the logon process that L0phtcrack can crack, the tool can’t work for logon capture in this environment. WEP or AES encryption and compatibility notes aren’t the limiting factor here; Kerberos is the reason.