nerdexam
EC-Council

312-38 · Question #82

In which of the following attacks does an attacker use software that tries a large number of key combinations in order to get a password?

The correct answer is B. Brute force attack. Brute force attack (B) describes exactly this technique - systematically trying every possible key or password combination until the correct one is found, much like trying every key on a massive keyring. Why the distractors are wrong: A (Buffer overflow): Exploits memory…

Network Security Threats, Attacks, and Vulnerabilities

Question

In which of the following attacks does an attacker use software that tries a large number of key combinations in order to get a password?

Options

  • ABuffer overflow
  • BBrute force attack
  • CZero-day attack
  • DSmurf attack

How the community answered

(27 responses)
  • B
    93% (25)
  • C
    4% (1)
  • D
    4% (1)

Explanation

Brute force attack (B) describes exactly this technique - systematically trying every possible key or password combination until the correct one is found, much like trying every key on a massive keyring.

Why the distractors are wrong:

  • A (Buffer overflow): Exploits memory boundaries by sending more data than a buffer can hold, causing crashes or code execution - no password guessing involved.
  • C (Zero-day attack): Exploits a previously unknown vulnerability before a patch exists - it targets software flaws, not credentials.
  • D (Smurf attack): A network-level DDoS attack that floods a victim with ICMP echo replies - entirely unrelated to passwords.

Memory tip: Think "brute force" = raw muscle - no cleverness, just overwhelming trial-and-error until something gives way.

Topics

#Brute force attack#Password cracking#Authentication attacks#Attack methods

Community Discussion

No community discussion yet for this question.

Full 312-38 Practice