nerdexam
GIAC

GCIH · Question #262

Which of the following attacks is specially used for cracking a password?

The correct answer is B. Dictionary attack. A dictionary attack is a password-cracking method that systematically tries words from a predefined wordlist or dictionary to guess credentials. The other options serve different attack purposes unrelated to password cracking.

Vulnerability Exploitation & Privilege Escalation

Question

Which of the following attacks is specially used for cracking a password?

Options

  • APING attack
  • BDictionary attack
  • CVulnerability attack
  • DDoS attack

How the community answered

(54 responses)
  • A
    2% (1)
  • B
    93% (50)
  • C
    4% (2)
  • D
    2% (1)

Why each option

A dictionary attack is a password-cracking method that systematically tries words from a predefined wordlist or dictionary to guess credentials. The other options serve different attack purposes unrelated to password cracking.

APING attack

A PING attack (ICMP flood) is used for network reconnaissance or denial-of-service, not for cracking passwords.

BDictionary attackCorrect

A dictionary attack is specifically designed to crack passwords by iterating through a list of common words, phrases, or previously leaked credentials. It targets authentication systems by exploiting the tendency of users to choose predictable or common passwords. This makes it the only option among the choices that is purpose-built for password cracking.

CVulnerability attack

A vulnerability attack exploits software or system weaknesses to gain access or execute code, but is not specifically a password-cracking technique.

DDoS attack

A DoS (Denial of Service) attack is intended to disrupt service availability for legitimate users, not to recover or crack passwords.

Concept tested: Dictionary attack as a password cracking technique

Source: https://owasp.org/www-community/attacks/Credential_stuffing

Topics

#dictionary attack#password cracking#wordlist attack

Community Discussion

No community discussion yet for this question.

Full GCIH Practice