LM hashes are split into two 16-character halves (each representing 7-character blocks). If the original password is less than 8 characters, the second half of the LM hash will always be a constant:
"AAD3B435B51404EE"
This known value is used to pad the second half of the password, and it signals that the original password was
7 characters or fewer.
In the options:
B). 44EFCE164AB921CQAAD3B435B51404EE # ends with AAD3B435B51404EE # < 8 chars E). B757BF5C0D87772FAAD3B435B51404EE # also ends with AAD3B435B51404EE # < 8 chars From CEH v13 Official Courseware:
Module 6: Malware Threats # LM Hash Weaknesses
Reference:CEH v13 Study Guide - Module 6: Password Cracking # LM Hash Structure and Indicators

ISAPI (Internet Server Application Programming Interface) filters are DLLs used to extend the functionality of Microsoft IIS (Internet Information Services). If unnecessary or outdated ISAPI filters are enabled, they can introduce vulnerabilities or backdoors that attackers may exploit to launch web server-based attacks.
From the CEH v13 Official Courseware:
Module 14: Hacking Web Servers
Section: Web Server Vulnerabilities
Subsection: Common Web Server Misconfigurations
CEH v13 states:
"Unnecessary ISAPI filters and extensions should be disabled or removed, as they may introduce unneeded attack surfaces on the web server. Attackers may exploit vulnerabilities in these filters to gain unauthorized access, execute code remotely, or escalate privileges on the server." This is part of a broader hardening strategy to reduce the web server's attack surface.
Incorrect Options:
A). Social engineering involves manipulating people, not software vulnerabilities.
C). Jailbreaking refers to bypassing restrictions on mobile devices.
D). Wireless attacks are unrelated to web server software components.
Reference:CEH v13 Study Guide - Module 14: Hacking Web Servers # Topic: "Disabling Unnecessary Services and ISAPI Filters"Microsoft IIS Security Best Practices - Official Documentation
======