IOC, Cryptographic and password attacks

What do attackers often target in cryptographic attacks?

• The encryption key

• The implementation of cryptography

• The encryption algorithm

What is a birthday attack based on?

• The strength of the encryption key

• The length of the plaintext

• The probability of hash collisions

Which hashing algorithm was found to have vulnerabilities leading to hash collisions?

• SHA-256

• AES

• MD5

What is a downgrade attack?

• Intercepting communication between devices

• Forcing devices to use weaker encryption or no encryption at all

• Cracking the encryption key

What is SSL stripping?

• A method to strengthen SSL encryption

• A technique to create hash collisions

• A type of downgrade attack where an attacker intercepts communication and downgrades the connection to HTTP

Plaintext is more secure than hashes

• 
  True

• False

What are hashes?

• Fixed-length strings of text generated from variable-length inputs

• Reversible text encryption methods

• Variable-length strings of text generated from fixed-length inputs

What is a characteristic of hashes?

• They are variable-length

• They are one-way

• They are reversible

What type of attack involves trying common passwords against multiple accounts?

Why are brute force attacks considered slow?

• They involve trying every possible password combination

• They only target common passwords

• They require multiple accounts to be effective