Password Attacks (Security+) Quiz: Brute Force & Rainbow Tables

Submit

2. What is the most effective combination of defenses against password attacks?

Strong passwords and account lockout only

Strong passwords, salted hashing, MFA, and account lockout

Password complexity and change frequency

Encryption and regular password audits

3. True or False: A password with 20 characters is immune to brute force attacks.

True

False

4. Which tool or technique can detect brute force attacks on a system?

Monitoring login attempt logs and failed authentication rates

Analyzing password strength requirements

Reviewing user password history

Implementing encryption protocols

5. What is a hybrid attack in the context of password cracking?

Combining dictionary words with numbers and symbols

Using both online and offline password guessing techniques

Alternating between brute force and rainbow table methods

Mixing different hashing algorithms in one attempt

6. True or False: Multi-factor authentication (MFA) completely eliminates the risk of password attacks.

True

False

Submit

8. Which hashing algorithm is most resistant to brute force attacks due to computational cost?

MD5

SHA-1

Bcrypt

SHA-256 without iteration

9. What is the primary advantage of using a password manager in defending against password attacks?

It eliminates the need for strong passwords

It generates and stores unique, strong passwords for each account

It prevents rainbow table attacks automatically

It detects brute force attempts in real-time

10. True or False: A 12-character password with mixed case is equally vulnerable to brute force as an 8-character password.

True

False

11. What is a brute force attack?

Attempting all possible password combinations until access is gained

Using a precomputed table of password hashes to find matches

Guessing passwords based on common words or personal information

Intercepting network traffic to capture plaintext passwords

12. Which defense strategy limits the number of login attempts allowed?

Mandatory password changes

Account lockout after failed attempts

Password complexity requirements

Multi-factor authentication enrollment

13. What is credential stuffing?

Using leaked username-password pairs on multiple accounts

Attempting random character combinations to guess passwords

Analyzing password patterns to predict likely passwords

Capturing passwords through keystroke logging

14. True or False: Rainbow tables are ineffective against salted password hashes.

True

False

Submit

16. Which countermeasure is most effective against rainbow table attacks?

Enforcing complex password requirements

Using salt when hashing passwords

Implementing account lockout policies

Disabling password history

17. What is a dictionary attack?

Testing passwords from a predefined list of common words

Systematically trying every possible character combination

Using stolen password hashes with precomputed tables

Exploiting weak encryption algorithms to reveal passwords

18. True or False: A brute force attack requires knowledge of the target system's password policy.

True

False

Submit

20. Which attack uses precomputed hash values stored in a lookup table?

Brute force attack

Rainbow table attack

Dictionary attack

Credential stuffing

Password Attack Quiz: Brute Force or Rainbow Table?

1. Brute force attacks are most practical against systems with weak ____ policies.

2.

What first name or nickname would you like us to use?

2. What is the most effective combination of defenses against password attacks?

3. True or False: A password with 20 characters is immune to brute force attacks.

4. Which tool or technique can detect brute force attacks on a system?

5. What is a hybrid attack in the context of password cracking?

6. True or False: Multi-factor authentication (MFA) completely eliminates the risk of password attacks.

7. Rainbow tables require significant ____ space to store precomputed hash values.

8. Which hashing algorithm is most resistant to brute force attacks due to computational cost?

9. What is the primary advantage of using a password manager in defending against password attacks?

10. True or False: A 12-character password with mixed case is equally vulnerable to brute force as an 8-character password.

11. What is a brute force attack?

12. Which defense strategy limits the number of login attempts allowed?

13. What is credential stuffing?

14. True or False: Rainbow tables are ineffective against salted password hashes.

15. A salt is a random value added to a password before ____.

16. Which countermeasure is most effective against rainbow table attacks?

17. What is a dictionary attack?

18. True or False: A brute force attack requires knowledge of the target system's password policy.

19. A rainbow table attack is faster than brute force because it ____.

20. Which attack uses precomputed hash values stored in a lookup table?