nerdexam
GIAC

GCIH · Question #261

Which of the following password cracking attacks is based on a pre-calculated hash table to retrieve plain text passwords?

The correct answer is A. Rainbow attack. A rainbow table attack uses pre-computed tables of hash-to-plaintext mappings to recover passwords extremely quickly, trading storage space for computation time.

Vulnerability Exploitation & Privilege Escalation

Question

Which of the following password cracking attacks is based on a pre-calculated hash table to retrieve plain text passwords?

Options

  • ARainbow attack
  • BBrute Force attack
  • CDictionary attack
  • DHybrid attack

How the community answered

(35 responses)
  • A
    94% (33)
  • B
    3% (1)
  • C
    3% (1)

Why each option

A rainbow table attack uses pre-computed tables of hash-to-plaintext mappings to recover passwords extremely quickly, trading storage space for computation time.

ARainbow attackCorrect

A rainbow table attack relies on large pre-calculated lookup tables that store chains of hash values and their corresponding plaintexts, generated offline before the attack begins. When an attacker obtains a password hash, they search the table to find the matching plaintext without performing any live hashing. This makes rainbow table attacks far faster than brute force or dictionary attacks for unsalted hashes, and is why salting passwords is a critical countermeasure.

BBrute Force attack

A brute force attack systematically computes hashes for every possible character combination at attack time - it does not use any pre-calculated table.

CDictionary attack

A dictionary attack hashes words from a wordlist during the attack itself rather than consulting a pre-computed table, so it does not match the definition of a pre-calculated hash table attack.

DHybrid attack

A hybrid attack combines dictionary words with brute force mutations (such as appending numbers or symbols) and computes hashes on the fly, rather than looking up pre-calculated values.

Concept tested: Rainbow table pre-computed hash password cracking

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements

Topics

#rainbow tables#password cracking#hash pre-computation#credential attacks

Community Discussion

No community discussion yet for this question.

Full GCIH Practice