EC-Council
312-38 · Question #82
In which of the following attacks does an attacker use software that tries a large number of key combinations in order to get a password?
The correct answer is B. Brute force attack. Brute force attack (B) describes exactly this technique - systematically trying every possible key or password combination until the correct one is found, much like trying every key on a massive keyring. Why the distractors are wrong: A (Buffer overflow): Exploits memory…
Network Security Threats, Attacks, and Vulnerabilities
Question
In which of the following attacks does an attacker use software that tries a large number of key combinations in order to get a password?
Options
- ABuffer overflow
- BBrute force attack
- CZero-day attack
- DSmurf attack
How the community answered
(27 responses)- B93% (25)
- C4% (1)
- D4% (1)
Explanation
Brute force attack (B) describes exactly this technique - systematically trying every possible key or password combination until the correct one is found, much like trying every key on a massive keyring.
Why the distractors are wrong:
- A (Buffer overflow): Exploits memory boundaries by sending more data than a buffer can hold, causing crashes or code execution - no password guessing involved.
- C (Zero-day attack): Exploits a previously unknown vulnerability before a patch exists - it targets software flaws, not credentials.
- D (Smurf attack): A network-level DDoS attack that floods a victim with ICMP echo replies - entirely unrelated to passwords.
Memory tip: Think "brute force" = raw muscle - no cleverness, just overwhelming trial-and-error until something gives way.
Topics
#Brute force attack#Password cracking#Authentication attacks#Attack methods
Community Discussion
No community discussion yet for this question.