nerdexam
EC-Council

112-52 · Question #64

Which method involves guessing passwords through an automated process of trial and error?

The correct answer is C. Brute force attack. Brute force attack (C) is correct because it describes exactly this technique: automated software systematically tries every possible password combination - letters, numbers, symbols - until it finds the right one, relying purely on computational power rather than human judgment.

Attacks and Countermeasures

Question

Which method involves guessing passwords through an automated process of trial and error?

Options

  • ASocial engineering
  • BPhishing
  • CBrute force attack
  • DSpoofing

How the community answered

(26 responses)
  • A
    8% (2)
  • C
    88% (23)
  • D
    4% (1)

Explanation

Brute force attack (C) is correct because it describes exactly this technique: automated software systematically tries every possible password combination - letters, numbers, symbols - until it finds the right one, relying purely on computational power rather than human judgment.

Why the others are wrong:

  • A. Social engineering - manipulates people psychologically to reveal credentials voluntarily, no automated guessing involved
  • B. Phishing - tricks users into entering credentials on fake websites or via deceptive emails; still human-targeted deception, not trial-and-error automation
  • D. Spoofing - involves faking an identity (IP address, email sender, DNS entry) to impersonate a trusted source; unrelated to password guessing

Memory tip: Think of "brute force" literally - it's the dumb muscle approach. No cleverness, no tricks, just raw computational power hammering away until something breaks. If the attack uses a machine to guess systematically, it's brute force.

Topics

#Brute Force Attack#Password Cracking#Authentication#Attack Methods

Community Discussion

No community discussion yet for this question.

Full 112-52 Practice