nerdexam
EC-Council

312-50V10 · Question #666

In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Rip

The correct answer is C. Hybrid. A hybrid attack combines dictionary-based wordlists with brute force permutations to test common words and their variations against user account passwords.

System Hacking

Question

In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Ripper, and running it against user accounts located by the application. The larger the word and word fragment selection, the more effective the dictionary attack is. The brute force method is the most inclusive, although slow. It usually tries every possible letter and number combination in its automated exploration. If you would use both brute force and dictionary methods combined together to have variation of words, what would you call such an attack?

Options

  • AFull Blown
  • BThorough
  • CHybrid
  • DBruteDics

How the community answered

(33 responses)
  • A
    3% (1)
  • C
    94% (31)
  • D
    3% (1)

Why each option

A hybrid attack combines dictionary-based wordlists with brute force permutations to test common words and their variations against user account passwords.

AFull Blown

Full Blown is not a recognized or standardized password cracking methodology in security literature or tooling.

BThorough

Thorough is a generic descriptive adjective and not a defined attack technique in password cracking terminology.

CHybridCorrect

A hybrid attack is the recognized industry term for combining a dictionary attack with brute force techniques. It takes words from a wordlist and applies mutations such as appending numbers, symbols, or character substitutions, making it more effective than either method in isolation. Password cracking tools like John the Ripper and L0phtCrack both implement hybrid attack modes.

DBruteDics

BruteDics is not a standardized term in the security industry for any recognized password attack method.

Concept tested: Hybrid password attack combining dictionary and brute force

Topics

#hybrid attack#dictionary attack#brute force#password cracking

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice