GCIH · Question #18
You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP-based network. An attacker uses software that keeps trying password combinations until the correct password is…
The correct answer is C. Brute Force. An attacker systematically tries every possible password combination until the correct credential is discovered, which is the definition of a brute force attack.
Question
You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP-based network. An attacker uses software that keeps trying password combinations until the correct password is found. Which type of attack is this?
Options
- ADenial-of-Service
- BMan-in-the-middle
- CBrute Force
- DVulnerability
How the community answered
(38 responses)- A8% (3)
- B3% (1)
- C87% (33)
- D3% (1)
Why each option
An attacker systematically tries every possible password combination until the correct credential is discovered, which is the definition of a brute force attack.
A Denial-of-Service attack floods a system with traffic or requests to make it unavailable, not to guess credentials.
A man-in-the-middle attack intercepts and potentially alters communications between two parties without their knowledge.
A brute force attack works by exhaustively attempting all possible password combinations - or a large subset using dictionaries - until authentication succeeds. Unlike targeted exploits, it requires no prior knowledge of the password. The defining characteristic is the automated, repetitive trial-and-error process described in the question.
Vulnerability is a weakness in a system, not a category of active attack technique.
Concept tested: Identifying brute force password attack type
Source: https://owasp.org/www-community/attacks/Brute_force_attack
Topics
Community Discussion
No community discussion yet for this question.