GCIH · Question #245
Which of the following types of attack can guess a hashed password?
The correct answer is A. Brute force attack. A brute force attack systematically tries all possible input combinations and can compute and compare hashes to crack a hashed password.
Question
Which of the following types of attack can guess a hashed password?
Options
- ABrute force attack
- BEvasion attack
- CDenial of Service attack
- DTeardrop attack
How the community answered
(21 responses)- A86% (18)
- C10% (2)
- D5% (1)
Why each option
A brute force attack systematically tries all possible input combinations and can compute and compare hashes to crack a hashed password.
A brute force attack works by generating candidate passwords, hashing each one using the same algorithm as the target, and comparing the result to the stored hash. Because the attacker never needs to reverse the hash directly, brute force is an effective method for cracking hashed passwords, especially weak or short ones, given sufficient compute time.
An evasion attack is a technique used to bypass intrusion detection or security systems, not a method for cracking passwords.
A Denial of Service attack aims to make resources unavailable to users and has no mechanism for guessing or recovering passwords.
A teardrop attack exploits IP fragmentation to crash systems and is unrelated to password hashing or credential recovery.
Concept tested: Brute force attack against hashed passwords
Source: https://owasp.org/www-community/attacks/Brute_force_attack
Topics
Community Discussion
No community discussion yet for this question.