nerdexam
GIAC

GSLC · Question #337

Which of the following is a method of defeating a cryptographic scheme by trying a large number of possibilities?

The correct answer is C. Brute force. Brute force is the attack method that defeats cryptographic schemes by exhaustively trying all possible key or password combinations until the correct one is found.

Security Architecture & Engineering

Question

Which of the following is a method of defeating a cryptographic scheme by trying a large number of possibilities?

Options

  • AZero-day
  • BIP spoofing
  • CBrute force
  • DFMS

How the community answered

(48 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    88% (42)
  • D
    8% (4)

Why each option

Brute force is the attack method that defeats cryptographic schemes by exhaustively trying all possible key or password combinations until the correct one is found.

AZero-day

A zero-day is an undisclosed software vulnerability that has not yet been patched, not a method of cryptographic attack through exhaustive trial.

BIP spoofing

IP spoofing is a network-level attack that forges the source IP address in packets to impersonate another host, unrelated to breaking cryptographic schemes.

CBrute forceCorrect

Brute force attacks work by systematically trying every possible combination of keys, passwords, or inputs until the correct one is discovered. This method directly targets the cryptographic scheme itself by attempting to exhaust the entire keyspace. It is the foundational concept behind key length requirements - longer keys exponentially increase the time required for a successful brute force attack.

DFMS

The FMS (Fluhrer, Mantin, and Shamir) attack is a specific cryptanalytic attack targeting weak IVs in the RC4 cipher, not a general method of trying large numbers of possibilities.

Concept tested: Brute force cryptographic attack method

Source: https://csrc.nist.gov/glossary/term/brute_force_attack

Topics

#brute force attack#cryptographic attack#password cracking#attack methods

Community Discussion

No community discussion yet for this question.

Full GSLC Practice