1.1.3

Reorder

Abigail and Zoe are setting up a website for their new business venture and are discussing the MOST effective method to maintain a high level of password security over time for their admin accounts.

Rank the options below from BEST --> WORST

• Employing a reputable password manager to generate and store complex passwords

• Choosing passwords that are at least 10 characters long with mixed characters

• Regularly changing the password to something they can easily recall

• Utilizing the same password across all accounts for consistency

1

2

3

4

• 1
• 2
• 3
• 4

Multiple Choice

What is a Hybrid Attack?

• A combination of dictionary and brute force attacks

• A method to secure databases

• A type of software

• A way to create passwords

Multiple Choice

What is a Dictionary Attack?

• A method to create strong passwords

• Software that tests potential passwords

• A type of database

• A brute force attack

Multiple Choice

What is a database?

• A collection of data organized for retrieval

• A type of software

• A programming language

• A hardware component

Multiple Select

Which of the following pieces of information would be included in a data dictionary?

• entity/table name

• attribute/field names

• primary key

• data types

Multiple Choice

What is Password Spraying and how does it work?

• Testing a weak password against a single account

• Testing a weak password against a large number of accounts

• Using a strong password to secure accounts

• Avoiding lockouts after incorrect attempts

Multiple Choice

You are using a password attack that tests every possible keystroke for every single key in a password until the correct one is found.

Which of the following technical password attacks are you using?

• Brute Force attack

• Password Sniffing

• Key logger

• Pass-the-hash attack

Multiple Choice

Which of the following password attacks uses preconfigured matrices of hashed dictionary words?

• Brute-force attack

• Hybrid attack

• Rainbow table attack

• Dictionary attack

Multiple Choice

What is the difference between password spraying and dictionary brute force attacks?

• Password spraying uses one password for multiple accounts

• Dictionary brute force uses one password for multiple accounts

• Both methods are the same

• Password spraying is more secure than brute force

Multiple Choice

What is the definition of Credential Stuffing?

• A method to create strong passwords

• Trying username/password from a breach

• A technique to secure user accounts

• A way to recover lost passwords

Multiple Choice

What does the attack assume about people's password usage?

• They use unique passwords for each account

• They share passwords with friends

• They reuse their passwords

• They change passwords frequently

Multiple Choice

What is a Data Breach?

• A method of compressing data to save space

• A secure way to store data in the cloud

• An incident where information is stolen or taken from a system without the knowledge or authorization of the system's owner

• A technique for recovering lost data

Multiple Choice

What is the purpose of the website 'Have I Been Pwned'?

• To check if your email has been compromised

• To generate secure passwords

• To provide antivirus software

• To track online purchases

Poll

How confident do you feel about this topic now?

• Very confident
• Somewhat confident
• Not confident