nerdexam
EC-Council

312-50V13 · Question #340

A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed…

The correct answer is C. Dictionary attack. A computer science student attempting to crack a secured PDF by programmatically trying passwords from a list of commonly used passwords is performing a dictionary attack.

Submitted by kavita_s· Mar 6, 2026Cryptography

Question

A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed the forms to be completed, the student decides to write a script that pulls passwords from a list of commonly used passwords to try against the secured PDF until the correct password is found or the list is exhausted. Which cryptography attack is the student attempting?

Options

  • AMan-in-the-middle attack
  • BBrute-force attack
  • CDictionary attack
  • DSession hijacking

How the community answered

(40 responses)
  • B
    3% (1)
  • C
    95% (38)
  • D
    3% (1)

Why each option

A computer science student attempting to crack a secured PDF by programmatically trying passwords from a list of commonly used passwords is performing a dictionary attack.

AMan-in-the-middle attack

A Man-in-the-middle attack involves an attacker intercepting and potentially altering communications between two parties without their knowledge.

BBrute-force attack

A brute-force attack attempts every possible character combination until the correct password is found; while a dictionary attack is a form of brute-force, it is more specific in using a pre-defined list rather than exhaustive combination generation.

CDictionary attackCorrect

A dictionary attack involves attempting to guess a password by systematically trying every word or phrase from a pre-compiled list (a 'dictionary') of common or known passwords, which precisely matches the student's method of pulling passwords from a list.

DSession hijacking

Session hijacking involves an attacker taking over an active authenticated session between two parties.

Concept tested: Cryptography attacks (password guessing techniques)

Source: https://owasp.org/www-community/attacks/Dictionary_attack

Topics

#dictionary attack#password cracking#cryptography attacks

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice