Arrange these stages of the lesson's password-hash demonstration in the order described, keeping the activity inside an authorized, isolated lab.

### Why this is right The demonstration first obtains the password-hash data from the lab target, then places a copy in a local text file. The offline tool operates on that prepared copy, and its results are displayed afterward. Keeping the sequence in an authorized lab is part of the lesson's safety boundary. ### The order 1. **Access the lab target's password-hash file**: The demonstration needs the hash data before it can prepare a local copy. 2. **Copy the hashes into a local text file**: The copied data becomes the input file for the offline test. 3. **Use an offline password-cracking tool on the copied hashes**: The tool attempts password guesses against the supplied hash data without making the target system perform those guesses. 4. **Display the tool's reported results**: Results can only be reviewed after the tool has processed its input. ### Watch out A password hash is not the password itself. Offline guessing tests candidate passwords against the hash representation. The order here describes the provided classroom demonstration, not permission to obtain or test credentials from systems outside the lab. ### Terms - **Password hash**: A transformed value derived from a password and used for password verification. - **Offline password-cracking tool**: Software that tests password guesses against copied hash data rather than interacting with the account's live login service. - **Virtual machine**: A software-based computer used to run an isolated lab system. - **Authorization**: Permission from the system owner or responsible authority to perform a test. ### Remember The copied hash file is the input to the offline test, and authorization must come before any security testing.