GCIH: GIAC Certified Incident HandlerDemo

Question

Andrew, a bachelor’s student at Faulkner University, creates a Gmail account and uses Faulkner as its password. A few days later, he begins receiving many emails saying that his Gmail account has been hacked. He also discovers that someone has deleted some of his important messages. Which of the following methods did the attacker use to crack Andrew’s password?

Each correct answer represents a complete solution.

Choose three

A Denial-of-service (DoS) attack
B Zero-day attack
C Brute force attack
D Social engineering
E Buffer-overflow attack
F Rainbow attack

Explanation

A password based on a publicly associated name is susceptible to brute-force guessing and can be obtained through social engineering that tricks the account holder into revealing or resetting credentials. If password hashes have been acquired, a rainbow-table attack can recover common, predictable passwords using precomputed hash values. NIST describes brute-force password cracking and rainbow tables as password-recovery techniques.

Learn more

NIST SP 800-115: Technical Guide to Information Security Testing and Assessment

GCIH: GIAC Certified Incident HandlerDemo

AstroTutor

Notes

Readiness

QuestionQ182

Community Discussion