A company requires employees to enter a password and a code from a mobile authenticator app. Which factors are being used?
A secure research lab requires a fingerprint scan and a swipe card to enter. Which factors are these?
A remote work platform allows login only if the user is on the corporate VPN network. Which type of factor is this?
A company uses facial recognition to allow passwordless login. What is a primary advantage of this system?
A system requires a password, a fingerprint scan, and confirmation that the login is from a specific office building. Which MFA factors are used?
Employees complain that MFA slows down login. Which trade-off is being described?
A website stores passwords with a unique salt for each user. What does this prevent?
Why is a unique salt added to each user’s password before hashing?
A legacy system stores passwords using MD5. Why is this problematic?
A company wants fast login times but strong resistance to offline attacks. Which trade-off must they consider?
A new hashing algorithm is collision-resistant but slower than older algorithms. Why might this still be preferred?
When a user enters a password, the system hashes it and compares it to the stored hash. Which property of hashes is being used?
A system hashes passwords without salting. Two users have the same password. What risk exists?
An adversary steals a hashed password database. Which type of attack does this enable?
Many employees reuse the same password across services. What type of attack does this make easier?
IoT devices are shipped with default usernames and passwords. An attacker tries these to gain access. Which attack is this?
An adversary tries the common password “Password123” on all accounts. Which attack is this?
Rainbow tables are precomputed lists of hashes for common passwords. How does adding a unique salt help?
An attacker uses automated software to test every possible password against a captured hash. Which type of attack is this?
After implementing MFA, strong hashing, and a robust password policy, a company evaluates residual risk. Which statement is true?