GSLC · Question #74
Which of the following are types of access control attacks? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. Brute force attack C. Dictionary attack D. Spoofing. Access control attacks attempt to bypass or defeat authentication and authorization mechanisms - brute force, dictionary attacks, and spoofing all target access controls, while mail bombing is a denial-of-service technique.
Question
Which of the following are types of access control attacks? Each correct answer represents a complete solution. Choose all that apply.
Options
- ABrute force attack
- BMail bombing
- CDictionary attack
- DSpoofing
How the community answered
(64 responses)- A91% (58)
- B9% (6)
Why each option
Access control attacks attempt to bypass or defeat authentication and authorization mechanisms - brute force, dictionary attacks, and spoofing all target access controls, while mail bombing is a denial-of-service technique.
Brute force attacks systematically enumerate every possible credential combination to defeat an authentication system, directly targeting access control by exhausting the credential space.
Mail bombing floods a target inbox with massive volumes of email to overwhelm a mail server, which is a denial-of-service attack against mail infrastructure rather than an attempt to bypass access control.
Dictionary attacks use precompiled wordlists of common passwords to guess credentials, targeting the authentication component of access control through a more efficient credential-guessing approach.
Spoofing impersonates a trusted identity - such as an IP address, MAC address, or user account - to deceive access control systems into granting unauthorized access.
Concept tested: Identifying access control attack types
Source: https://owasp.org/www-community/attacks/Brute_force_attack
Topics
Community Discussion
No community discussion yet for this question.