GCIH · Question #32
Which of the following are types of access control attacks? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. Spoofing B. Brute force attack C. Dictionary attack. Spoofing, brute force, and dictionary attacks all directly target access control mechanisms to gain unauthorized access, while mail bombing is a denial-of-service attack that does not attempt to bypass access controls.
Question
Which of the following are types of access control attacks? Each correct answer represents a complete solution. Choose all that apply.
Options
- ASpoofing
- BBrute force attack
- CDictionary attack
- DMail bombing
How the community answered
(35 responses)- A86% (30)
- D14% (5)
Why each option
Spoofing, brute force, and dictionary attacks all directly target access control mechanisms to gain unauthorized access, while mail bombing is a denial-of-service attack that does not attempt to bypass access controls.
Spoofing involves falsifying an identity, credential, IP address, or MAC address to impersonate a trusted entity and circumvent access control checks.
A brute force attack systematically attempts every possible password or cryptographic key combination to defeat authentication-based access controls.
A dictionary attack uses a precompiled wordlist of likely passwords or passphrases to exploit weak credentials, directly targeting authentication and access control mechanisms.
Mail bombing is a denial-of-service attack that floods a mail server with excessive message volume to overwhelm it; it does not attempt to circumvent or exploit access control mechanisms to gain unauthorized access.
Concept tested: Identifying access control attack categories
Source: https://csrc.nist.gov/publications/detail/sp/800-12/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.