CERTIFIED-IN-CYBERSECURITY Question #405: Real Exam Question with Answer & Explanation

The correct answer is B: Denial of Service. A denial of service (DoS) attack is not typically used to gain access to an organization's network. Instead, it is designed to disrupt the operation of the network by overwhelming it with traffic, making it unavailable to its intended users (see NIST SP 800-61 Rev. 2 under Denial

Threats, Attacks, and Vulnerabilities

Question

Which of the following is NOT a type of attack that can be used to gain access to an organization's network?

Options

APassword spray attack
BDenial of Service
CBrute force
DRainbow table

Explanation

A denial of service (DoS) attack is not typically used to gain access to an organization's network. Instead, it is designed to disrupt the operation of the network by overwhelming it with traffic, making it unavailable to its intended users (see NIST SP 800-61 Rev. 2 under Denial of Service). The other options, on the other hand, are all methods that could potentially be used to gain unauthorized access to a network. A brute force attack involves systematically trying all possible combinations of passwords until the correct one is found (see the ISC2 Study Guide, Chapter 4, Module 2). A password spray attack involves trying a few commonly used passwords against a large number of accounts, hoping to find a match. A rainbow table is a pre-computed table used to invert cryptographic hash functions, typically used to crack password hashes.

Topics

#Attack types#Access attacks#Denial of Service#Credential attacks

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice Browse All CERTIFIED-IN-CYBERSECURITY Questions