A company's user lockout policy is enabled after five unsuccessful login attempts. The help desk notices a user is repeatedly locked out over the course of a workweek. Upon contacting the user, the…

Question

Options

• AReplay
• BRainbow tables
• CBrute force
• DPass the hash
• EDictionary

• A
  3% (1)
• B
  6% (2)
• C
  76% (25)
• D
  15% (5)

Explanation

Attack Types Explanation

Since the user is on vacation with no network access, someone else is repeatedly triggering the lockout policy by guessing the password - this points to Brute Force (C), which systematically tries every possible password combination until one works, and Dictionary (E), which uses a predefined list of common words/phrases to guess passwords. Both attacks are online, active guessing attacks that would repeatedly trigger account lockouts, perfectly matching the described scenario.

Why the distractors are wrong:

• Replay (A): Involves intercepting and retransmitting valid authentication data - it doesn't require multiple failed attempts
• Rainbow Tables (B): Used to crack already-captured password hashes offline, so it wouldn't trigger lockout policies
• Pass the Hash (D): Uses a stolen password hash to authenticate directly, typically succeeding on the first attempt without repeated failures

Memory Tip: Think "lockout = guessing." If an account keeps locking out, someone is actively guessing the password - that means Brute Force (tries everything) or Dictionary (tries common words). Offline attacks like Rainbow Tables and Pass the Hash never touch the login screen, so they'd never cause a lockout.

No community discussion yet for this question.