312-50V13 · Question #340
A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed…
The correct answer is C. Dictionary attack. A computer science student attempting to crack a secured PDF by programmatically trying passwords from a list of commonly used passwords is performing a dictionary attack.
Question
Options
- AMan-in-the-middle attack
- BBrute-force attack
- CDictionary attack
- DSession hijacking
How the community answered
(40 responses)- B3% (1)
- C95% (38)
- D3% (1)
Why each option
A computer science student attempting to crack a secured PDF by programmatically trying passwords from a list of commonly used passwords is performing a dictionary attack.
A Man-in-the-middle attack involves an attacker intercepting and potentially altering communications between two parties without their knowledge.
A brute-force attack attempts every possible character combination until the correct password is found; while a dictionary attack is a form of brute-force, it is more specific in using a pre-defined list rather than exhaustive combination generation.
A dictionary attack involves attempting to guess a password by systematically trying every word or phrase from a pre-compiled list (a 'dictionary') of common or known passwords, which precisely matches the student's method of pulling passwords from a list.
Session hijacking involves an attacker taking over an active authenticated session between two parties.
Concept tested: Cryptography attacks (password guessing techniques)
Source: https://owasp.org/www-community/attacks/Dictionary_attack
Topics
Community Discussion
No community discussion yet for this question.