220-1002 · Question #510
Which of the following would MOST likely be used by an attacker to identify the hash value of a strong password quickly?
The correct answer is C. Rainbow table. A Rainbow Table is a precomputed database of password hash values. Instead of calculating hashes on the fly, an attacker looks up the captured hash in the table to instantly find the corresponding plaintext password. This makes cracking even complex passwords extremely fast…
Question
Which of the following would MOST likely be used by an attacker to identify the hash value of a strong password quickly?
Options
- ABrute force
- BKey stretching
- CRainbow table
- DDictionary attack
How the community answered
(22 responses)- A5% (1)
- B9% (2)
- C86% (19)
Explanation
A Rainbow Table is a precomputed database of password hash values. Instead of calculating hashes on the fly, an attacker looks up the captured hash in the table to instantly find the corresponding plaintext password. This makes cracking even complex passwords extremely fast, which is why they are particularly dangerous against systems without salting. Brute force (A) tries every possible character combination but is computationally slow against strong, long passwords. A Dictionary attack (D) uses lists of common words and phrases - effective against weak passwords but fails against strong random ones. Key stretching (B) is actually a defensive technique (used in algorithms like bcrypt/PBKDF2) that makes each hash computation slower, specifically to defeat rainbow tables and brute force attacks. Rainbow tables are the fastest method to reverse known hashes, which is why salted hashing was developed to neutralize them.
Topics
Community Discussion
No community discussion yet for this question.