An attacker gains access to an employee’s password and the organization does not use MFA. What is the attacker’s most likely advantage?
Which statement best distinguishes an online password attack from an offline password attack?
A company suffers a breach and its user database (emails + passwords) is leaked online. Attackers begin trying those same password combinations on banking, shopping, and social media accounts. What attack is this?
A user picks the password Summer2024! for many of their accounts. An adversary tests that password against multiple different users across a company. What attack is this?
A set of smart home devices comes from the manufacturer with the login admin/password. An attacker tries common defaults like admin/password, root/1234, and administrator/0000. What attack method is being used?
An attacker has stolen a password hash database and is trying every possible password combination of eight lowercase letters. What type of attack is this?
An attacker loads a list of the 10,000 most commonly used passwords and hashes them to check against a stolen user hash. What type of attack is this?
A rainbow table is different from a dictionary attack because:
A security team notices thousands of login attempts against many users, but all attempts use the same password: Password123!
Which attack best matches this pattern?
An adversary obtains a single employee’s password from a previous data breach and uses it to try logging into the employee’s cloud storage, email, and payroll accounts.
Why might this attack succeed?
Which attack is MOST slowed down by strong account lockout policies?
An attacker steals a database of hashed passwords. They generate a huge table of potential passwords and their hashes, sort it, and search for a matching hash.
Which attack does this describe?