nerdexam
EC-Council

312-50V11 · Question #666

In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Rip

The correct answer is C. Hybrid. Combining a dictionary attack with brute force character mutations produces a hybrid attack, which tests dictionary words alongside rule-based variations.

System Hacking

Question

In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Ripper, and running it against user accounts located by the application. The larger the word and word fragment selection, the more effective the dictionary attack is. The brute force method is the most inclusive, although slow. It usually tries every possible letter and number combination in its automated exploration. If you would use both brute force and dictionary methods combined together to have variation of words, what would you call such an attack?

Options

  • AFull Blown
  • BThorough
  • CHybrid
  • DBruteDics

How the community answered

(25 responses)
  • B
    4% (1)
  • C
    88% (22)
  • D
    8% (2)

Why each option

Combining a dictionary attack with brute force character mutations produces a hybrid attack, which tests dictionary words alongside rule-based variations.

AFull Blown

'Full Blown' is not a recognized classification in standard password cracking or cybersecurity attack taxonomy.

BThorough

'Thorough' describes a qualitative level of effort and is not a defined attack methodology in security literature.

CHybridCorrect

A hybrid attack uses a dictionary as its base word list and then applies brute force transformations - such as appending digits, prepending symbols, or substituting characters - to each word. This strategy balances the targeted efficiency of dictionary lookups with the exhaustive coverage of brute force, making it more effective against passwords that are slightly modified common words.

DBruteDics

'BruteDics' is not a recognized or standardized term in any password cracking or cybersecurity framework.

Concept tested: Hybrid password cracking combining dictionary and brute force

Topics

#hybrid attack#dictionary attack#brute force#password cracking

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice