PenTest+ V2 Password Attack Techniques Overview

1. What is the primary difference between online and offline password attacks?

Online requires network access; offline uses captured hashes

Online is faster but requires more resources

Offline attacks are always unsuccessful

Online attacks cannot be detected by security systems

Submit

3. Which factor most significantly impacts the success rate of a brute-force attack?

Password length and complexity

Attacker's internet speed

Server location

Time of day

4. True or False: Spraying attacks attempt many passwords against few user accounts.

True

False

5. Which attack method is most effective against systems with weak password policies?

Rainbow table attack

Dictionary attack

Shoulder surfing

MITM attack

Submit

7. Which countermeasure best protects against brute-force password attacks?

Account lockout after failed attempts

Using only uppercase letters

Changing passwords monthly

Disabling password history

Submit

9. True or False: Two-factor authentication completely eliminates password-based attacks.

True

False

10. Which technique uses GPU acceleration to increase password-cracking speed?

Distributed computing

Parallel processing

Rainbow table optimization

Dictionary expansion

11. Which attack attempts all possible password combinations systematically until access is gained?

Dictionary attack

Brute-force attack

Rainbow table attack

Credential stuffing

12. Which password hashing algorithm is considered most resistant to modern attacks?

MD5

SHA-1

Bcrypt or Argon2

SHA-256 without salting

13. True or False: Credential stuffing is effective only when attackers have access to plaintext passwords.

True

False

Submit

15. Which of the following are common password attack vectors? (Select all that apply)

Social engineering

Keylogging

Packet sniffing

All of the above

Submit

16. What does a hybrid attack combine to maximize password-cracking success?

Dictionary words and numeric variations

Multiple hash algorithms

Online and offline cracking methods

GPU and CPU processing

17. True or False: A salted hash makes rainbow table attacks significantly less effective.

True

False

18. Which password attack relies on leaked credential databases from previous breaches?

Brute-force attack

Credential stuffing

Hybrid attack

Rule-based attack

Submit

20. What is the primary advantage of using a rainbow table in password cracking?

It generates passwords in real-time

It reduces computation time by using precomputed hash values

It bypasses password hashing algorithms

It increases the complexity of brute-force attempts

PenTest+ V2 Password Attack Techniques Overview Quiz

1. What is the primary difference between online and offline password attacks?

2.

What first name or nickname would you like us to use?

2. A ______ attack uses automation to test combinations of username and password pairs across multiple systems.

3. Which factor most significantly impacts the success rate of a brute-force attack?

4. True or False: Spraying attacks attempt many passwords against few user accounts.

5. Which attack method is most effective against systems with weak password policies?

6. What role does a ______ play in password security by adding randomness to hashes?

7. Which countermeasure best protects against brute-force password attacks?

8. A ______ is a precomputed table of password hashes used for rapid cracking.

9. True or False: Two-factor authentication completely eliminates password-based attacks.

10. Which technique uses GPU acceleration to increase password-cracking speed?

11. Which attack attempts all possible password combinations systematically until access is gained?

12. Which password hashing algorithm is considered most resistant to modern attacks?

13. True or False: Credential stuffing is effective only when attackers have access to plaintext passwords.

14. A ______ attack modifies dictionary words with numbers, symbols, or character substitutions.

15. Which of the following are common password attack vectors? (Select all that apply)

16. What does a hybrid attack combine to maximize password-cracking success?

17. True or False: A salted hash makes rainbow table attacks significantly less effective.

18. Which password attack relies on leaked credential databases from previous breaches?

19. A dictionary attack uses a predefined list of common ______ to attempt unauthorized access.

20. What is the primary advantage of using a rainbow table in password cracking?