nerdexam
GIAC

GCFA · Question #292

Which of the following types of attack can guess a hashed password?

The correct answer is C. Brute force attack. A brute force attack cracks hashed passwords by exhaustively hashing candidate passwords and comparing them to the stored hash until a match is found.

Advanced Incident Response & Digital Forensics Fundamentals

Question

Which of the following types of attack can guess a hashed password?

Options

  • ADenial of Service attack
  • BEvasion attack
  • CBrute force attack
  • DTeardrop attack

How the community answered

(17 responses)
  • A
    6% (1)
  • B
    6% (1)
  • C
    82% (14)
  • D
    6% (1)

Why each option

A brute force attack cracks hashed passwords by exhaustively hashing candidate passwords and comparing them to the stored hash until a match is found.

ADenial of Service attack

A Denial of Service attack floods a target system with traffic or requests to exhaust resources and make services unavailable - it has no mechanism for attempting, guessing, or recovering password values.

BEvasion attack

An evasion attack is designed to bypass or circumvent security controls such as IDS/IPS signatures and filters - it targets detection systems and does not involve password guessing or hash cracking.

CBrute force attackCorrect

A brute force attack against a hashed password works by systematically generating candidate plaintext values, applying the same hashing algorithm used to create the stored hash, and comparing the result against the target hash. Given enough time and compute resources, this approach will eventually find the correct password regardless of complexity.

DTeardrop attack

A Teardrop attack exploits vulnerabilities in TCP/IP packet fragmentation reassembly to crash a target system - it is a network-layer exploitation technique with no relationship to password hashing or credential recovery.

Concept tested: Brute force attack against hashed password credentials

Source: https://owasp.org/www-community/attacks/Brute_force_attack

Topics

#brute force attack#password cracking#hashed passwords#authentication

Community Discussion

No community discussion yet for this question.

Full GCFA Practice