Font size
WorksheetsPassword Cracking and Security
Total questions: 90
Worksheet time: 45mins
Which technology has enabled the emergence of "Decentralized IM" as a disruptive innovation?
Centralized Ledger Technology (CLT).
Distributed Ledger Technology (DLT) and Verifiable Credentials data model.
Traditional relational databases.
Single Sign-On (SSO) protocols only.
In the Verifiable Credentials (VCs) model, who sits at the center of the triangle of trust?
The issuer.
The verifier.
The holder (user).
The certificate authority.
What is "Password cracking"?
The process of creating strong, unique passwords.
The process of guessing or recovering a password from a stored or transmitted password hash to gain unauthorized access.
A method to encrypt sensitive data.
A legitimate security audit process only.
Which technique involves trying all possible combinations of characters until the correct password is found?
Dictionary attack.
Rainbow table attack.
Bruteforce attack.
Hybrid attack.
How does "Password sniffing" work?
It encrypts passwords before they are transmitted.
It intercepts and collects passwords transmitted over a network by capturing network traffic.
It creates fake login pages to trick users into entering credentials.
It only targets offline password databases.
Which of the following is a recommended best practice to prevent password sniffing?
Using unsecured networks.
Transmitting sensitive information in plaintext.
Using encrypted connections like HTTPS, SSH, or SSL.
Disabling two-factor authentication.
Why is password sniffing using Wireshark without the owner's consent considered illegal and unethical?
Because Wireshark is proprietary software.
Because it requires advanced technical skills.
Because it can capture and display sensitive information like login credentials, potentially leading to unauthorized access.
Because it is too complicated for general use.
To sniff received data (post respond) from an HTTP site in Wireshark, which filter method is recommended?
http.request.method == "GET".
http.response.code == 200.
http.request.method == "POST".
http.contains "password".
When attempting to sniff HTTPS traffic using Wireshark, why are the packets encrypted with TLS?
Because HTTPS is an unsecure protocol.
To prevent unauthorized interception and reading of contents without the encryption key.
Because Wireshark automatically encrypts all captured traffic.
Because the server explicitly denies any sniffing attempts.
What is the goal of password cracking?
To enhance password strength.
To gain unauthorized access to a computer system or online account.
To encrypt data for secure storage.
To verify the authenticity of a user.
What is the first general step a password cracker follows when attempting to crack a password?
Choose a cracking methodology.
Prepare the password hashes.
Steal a password, likely encrypted using a hash.
Run the cracking tool.
Which of the following describes a "Dictionary search" password cracking method?
Trying every possible combination of characters.
Searching each word in a dictionary for the correct password.
Using malware to track keystrokes.
Tricking a user into revealing their password.
What is "Phishing" as a password cracking method?
A method that uses precomputed tables of hashes.
An attack that fools a user into clicking an email attachment or signing into a false website, revealing their password.
A technique that involves combining dictionary words with random characters.
A brute-force method specifically for encrypted passwords.
"Rainbow attack" involves using what to generate other possible passwords?
Random characters only.
Different words from the original password and a list of leaked/previously cracked passwords.
Biometric data.
Network traffic analysis.
What is "Brute force" in the context of password cracking?
A method that uses only common dictionary words.
A method that involves trying every possible combination of characters until the correct password is discovered.
A method that relies on social engineering.
A method that encrypts passwords.
What is the core characteristic of a "Reverse Brute Force Attack" (AKA Password Spraying)?
It tries every possible password for a single username.
It uses a targeted list of common passwords while guessing a large list of potential usernames.
It targets encrypted passwords only.
It involves physically trying passwords on a device.
In a Dictionary Attack, what does an attacker systematically try as potential passwords?
Random combinations of characters.
Every number from 0 to 9999.
Every word in a dictionary or a list of words.
Encrypted hashes.
Which tool is mentioned as a popular command-line tool for performing dictionary attacks in a Kali Linux environment?
Wireshark.
Nmap.
Hydra.
Metasploit.
What is a "Hybrid Brute Force Attack"?
A simple brute force attack without any additional methods.
A combination of a dictionary attack with a basic brute force attack, often adding random values or characters to common words.
An attack that only uses malware.
An attack that relies on guessing common passwords.
What is the key difference between a Dictionary Attack and a Brute Force Attack regarding the passwords tested?
Dictionary attacks test short and random passwords, while brute force attacks use common words.
Brute force attacks test short and random passwords, while dictionary attacks use lists of common words and phrases.
Both attack types test the same kind of passwords.
Dictionary attacks only target encrypted passwords, while brute force attacks target plaintext passwords.
To protect against brute force attacks, what type of password is recommended for users?
Short, simple passwords.
Easily guessable passwords like "123456".
Strong passwords or passphrases of no fewer than 15 characters, consisting of multiple words.
Passwords that are frequently written down for easy access.
Why is it recommended to "Never store user passwords on public-facing servers"?
It makes password management easier for users.
Even encrypted passwords and password hash values are at risk of attacks like rainbow tables when stored online.
Public servers are inherently more secure for password storage.
It speeds up the login process for users.
Implementing "account controls" and "access management best practices" helps ensure what?
That any user can access IT systems.
That only legitimate users can log in by providing identifying information.
That passwords are not needed for access.
That only malicious actors can bypass security measures.
What is the purpose of setting an "account use policy that limits the number of failed login attempts"?
To encourage users to try more passwords.
To lock out legitimate users permanently.
To prevent brute-force attacks by increasing the lock-out time after failed attempts.
To store more user data.
How does setting up Multi-Factor Authentication (MFA) help protect against password cracking?
It makes passwords easier to remember.
It removes the need for any password.
It adds an extra security layer that a hacker must bypass even if they guess the password.
It automatically changes passwords regularly.
Which authentication method is nearly impossible to brute force due to key size and is not vulnerable to phishing or data breaches?
Password-based authentication.
SMS-based authentication.
Certificate-based authentication.
Biometric authentication.
Malware such as keyloggers and screen scrapers are used in which password cracking method?
Dictionary search.
Phishing.
Malware.
Guessing.
What type of attack involves an attacker using a script or program to repeatedly attempt to log in to a remote computer through SSH with different username and password combinations?
SQL Injection Attack.
SSH Brute Force Password Attack.
Denial of Service (DoS) Attack.
Cross-Site Scripting (XSS) Attack.
According to Microsoft, what is the term used to differentiate a reverse brute force attack from a basic brute force attack?
Dictionary attack.
Password spraying attack.
Rainbow table attack.
Hybrid attack.
What is the process of converting plaintext into an unintelligible form known as ciphertext?
Decryption.
Hashing.
Encryption.
Steganography.
What is the process of converting plaintext into an unintelligible form known as ciphertext?
Decryption.
Hashing.
Encryption.
Steganography.
In Symmetric Cryptography, what type of key is used for both encryption and decryption of data?
A public key.
A private key.
Two different keys.
The same secret key.
Which of the following is a popular symmetric cryptography algorithm mentioned in the source?
RSA.
Elliptic Curve Cryptography (ECC).
Advanced Encryption Standard (AES).
Diffie-Hellman.
In Asymmetric Cryptography, what is the public key used for?
To decrypt data, kept secret by the owner.
To encrypt data, and it is freely available to anyone.
Both encryption and decryption, kept secret.
Only for digital signatures, not encryption.
Why is Symmetric Key Cryptography also called Private Key Cryptography?
Because it uses multiple keys.
Because the single key used must be kept secret at all times.
Because it is only used by private individuals.
Because the key is public.
Which type of symmetric cipher encrypts basic information one byte/bit at a time, using a bitstream generation algorithm?
Block Ciphers.
Stream Ciphers.
Hybrid Ciphers.
Asymmetric Ciphers.
What is a notable advantage of Symmetric Encryption compared to Asymmetric Encryption?
It uses two different keys.
It is generally slower.
It is faster and has better performance due to using a single key.
It is more complex to implement.
Asymmetric encryption is also known by what other name?
Private-key encryption.
Secret-key encryption.
Public-key encryption.
Single-key encryption.
When you visit a website with an address starting with 'https,' which type of encryption are you dealing with?
Symmetric encryption only.
Hashing only.
Asymmetric encryption (initially for handshake, then symmetric).
No encryption.
In an asymmetric encryption environment, what are the two essential components for security?
A single secret key.
Public key encryption and private key encryption.
Hashing algorithms only.
A digital signature and a timestamp.
Which asymmetric encryption algorithm generates a public key by multiplying two large, random prime numbers?
Digital Signature Algorithm (DSA).
Elliptical Curve Cryptography (ECC).
Rivest Shamir Adleman (RSA).
Diffie-Hellman.
Which asymmetric encryption algorithm is an RSA alternative that uses smaller key sizes and mathematical elliptic curves, often used for cryptocurrency transactions?
Digital Signature Algorithm (DSA).
Elliptical Curve Cryptography (ECC).
Diffie-Hellman.
TLS/SSL protocol.
What is the purpose of the Diffie-Hellman exchange method?
To encrypt bulk data quickly.
To allow two parties who have never met to securely exchange public and private key pairs over insecure communication channels.
To digitally sign messages.
To verify the integrity of a message.
What is Public Key Infrastructure (PKI)?
A technology for securely storing private keys only.
A technology for authenticating users and devices in the digital world by associating cryptographic keys with entities via signed documents.
A method for distributing public keys without any verification.
A type of encryption algorithm.
In a PKI, what is the trusted party that digitally signs documents certifying that a cryptographic key belongs to a particular user or device?
Registration Authority (RA).
Key encryption facility.
Certificate Authority (CA).
Certificate Repository.
How does PKI help mitigate Man-in-the-Middle (MitM) attacks during an SSL/TLS handshake?
By allowing the client to only use symmetric encryption.
By preventing any form of encryption.
By authenticating the server and generating a unique session key for encrypted information exchange.
By publicizing all private keys.
Which component of PKI are electronically signed documents that verify ownership of a public key and are issued by Certificate Authorities?
Private Keys.
Certificate Repository.
Public Key Certificates.
Digital Signatures.
One of the advantages of Asymmetric Cryptography is that key distribution is not necessary. Why?
Public keys are exchanged through public-key servers, and their disclosure does not compromise private keys.
Private keys are freely available to everyone.
Symmetric keys are used for distribution.
There are no keys involved in the process.
What is a main disadvantage of asymmetric encryption?
It is faster than symmetric encryption.
It is less secure than symmetric encryption.
It is slower than symmetric encryption due to longer key lengths and complex calculations.
It does not support digital signatures.
What is the key difference between symmetric and asymmetric encryption concerning speed and security preferences?
Symmetric is slower but more secure; Asymmetric is faster but less secure.
Symmetric is faster and simpler but often less secure; Asymmetric sacrifices speed for security.
Both are equally fast and secure.
Symmetric uses two keys; Asymmetric uses one key.
What does 'Database security' primarily refer to?
The process of developing new database software.
The set of measures and protocols to protect databases and their systems from unauthorized access, use, or disclosure.
The physical placement of database servers.
The speed of data retrieval from a database.
Which of the following is NOT one of the aspects of database security mentioned?
Authentication.
Marketing.
Authorization.
Encryption.
What does 'Auditing and Monitoring' in database security help to identify?
Optimal database performance settings.
Potential security breaches and assists in forensic investigations.
The physical location of database servers.
User preferences for data display.
Which component of database security ensures that only authorized users can access specific data?
Authentication.
Configuration of DBMS.
Permissions and access controls.
Database audit.
Which type of database attack involves inserting malicious SQL code into a web form or input field to gain unauthorized access or steal data?
Cross-Site Scripting (XSS) Attack.
Privilege Escalation Attack.
SQL Injection Attack.
Denial-of-Service (DoS) Attack.
What is the purpose of a 'Cross-Site Scripting (XSS) Attack'?
To overwhelm a database server with excessive traffic.
To exploit vulnerabilities to gain higher privileges.
To inject malicious scripts into a website to steal data or perform unauthorized actions on the victim's browser.
To guess passwords or access credentials.
What is a 'Backdoor Attack' in the context of databases?
An attack that targets unpatched vulnerabilities in software.
An attack that creates a hidden or unauthorized entry point into a database or system.
An attack that uses common dictionary words to guess passwords.
An attack that encrypts database files.
According to the example provided, how can an attacker use SQL injection to return all records from a database table?
By using a well-formed SQL query.
By injecting ' OR 1=1 -- into an input field.
By encrypting the database connection.
By disabling input validation.
Which of the following is an effective method for preventing SQL injection attacks?
Allowing all special characters in data.
Disabling input validation.
Using parameterized queries and stored procedures.
Ignoring regular vulnerability assessments.
What does the best practice 'Verify user inputs' for SQL injection prevention involve?
Limiting user data entries to only accepting character inputs found in email addresses for email fields.
Accepting any input data as valid SQL commands.
Disabling all input fields on the website.
Allowing dynamic SQL creation without validation.
Why is it important to 'Actively manage patches and updates' to prevent SQL injection?
To increase the attack surface for hackers.
To keep up-to-date on newly discovered SQL injection flaws and implement fixes quickly.
To make the database incompatible with older applications.
To reduce the performance of the database.
What is a "Web application firewall (WAF)" designed to do in preventing HTML sniffing and SQL injection attacks?
To replace all other security measures.
To filter out harmful material and block suspicious requests.
To only protect against physical breaches.
To allow all incoming web requests.
In an "Unauthorized Access" attack, what are the typical steps an attacker follows until sensitive data is obtained?
Direct exfiltration only.
Reconnaissance, intrusion and presence, lateral movement and privilege escalation, exfiltration.
Only exploiting unpatched vulnerabilities.
Just guessing login credentials repeatedly.
What is a key security control to prevent unauthorized access to a database, related to user permissions?
Publicizing all user credentials.
Disabling all authentication mechanisms.
Limiting access to only authorized users and implementing role-based access control based on job roles.
Never encrypting data.
What is "Privilege escalation" in a database context?
When an attacker gains initial access with high-level privileges.
When an attacker gains lower-level privileges and then exploits vulnerabilities to gain higher-level privileges or sensitive data.
When a user legitimately increases their own access rights.
When a database administrator grants all users full access.
Which type of privilege escalation occurs when an attacker gains access directly to an account with the intent to perform actions as that person, without necessarily elevating permissions?
Horizontal Privilege Escalation.
Vertical Privilege Escalation.
Lateral Movement.
Root Access Escalation.
What is the "least privilege" principle in preventing privilege escalation?
Granting all users maximum privileges for convenience.
Limiting access to the database to only those users who need it to perform their jobs.
Allowing users to escalate their own privileges as needed.
Disabling all access controls.
Which step in database protection involves regularly monitoring user activity and reviewing logs for suspicious activity?
DBMS Configuration.
Authentication.
Database Auditing.
Backup.
What does the "Encryption" step in database protection aim to do?
Make data publicly accessible.
Protect sensitive data at rest and in transit.
Reduce the need for strong passwords.
Accelerate data retrieval.
When preventing HTML sniffing attacks, what does "Sanitize input data" involve?
Allowing all special characters and HTML tags.
Stripping out any special characters or HTML tags that are not allowed.
Encrypting only the input data.
Implementing strict input validation only.
What is the defining characteristic of "Social engineering" as a cybercrime?
It relies solely on software vulnerabilities.
It uses psychological manipulation to trick users into making security mistakes or giving away sensitive information.
It only targets technical infrastructure.
It is always easily detectable by automated systems.
What percentage of data breaches have social engineering components, according to the statistics?
30%.
62%.
90%.
100%.
Which type of cybercrime was the most common reported to the U.S. Internet Crime Complaint Center in 2021?
Malware attacks.
Ransomware.
Phishing and similar fraud.
DDoS attacks.
What makes social engineering especially dangerous, distinguishing it from attacks on software/operating systems?
It always targets high-profile executives.
It relies on human error, which is less predictable and harder to thwart.
It requires complex technical tools.
It only happens in physical settings.
What is the first stage in the social engineering attack lifecycle?
Hook.
Play.
Exit.
Investigation.
In the "Hook" stage of the social engineering lifecycle, what is the primary activity?
Deleting logs to cover tracks.
Crafting a pretext or cover story to gain the target's trust and manipulate them.
Stealing sensitive data from the system.
Identifying vulnerabilities in software.
What is the objective of the "Actions on Objectives" stage of a social engineering attack, aligned with the kill chain principles?
To establish communication with malware.
To gather information about the target.
To achieve goals such as stealing sensitive data, gaining access to a secure system, or disrupting business operations.
To choose a method of attack.
What is "Spear phishing"?
A general term for all fraudulent email messages.
A targeted version of phishing where messages are tailored to specific individuals or enterprises.
Phishing attacks carried out over text messages.
Phone-based phishing attacks.
Which type of phishing attack involves phishers pretending to be customer support agents on social media to extract information?
Smishing.
Vishing.
Angler phishing.
Whaling.
What is "Business Email Compromise (BEC)" primarily known for?
Being financially insignificant.
Impersonating a trusted business contact to convince the target to pay fake invoices, transfer funds, or disclose sensitive company information.
Spreading malware through email attachments.
Only targeting newly hired employees.
What is "Tailgating" (or Piggybacking) in social engineering?
Sending malicious emails to gain access.
An unauthorized person closely following an authorized person to physically enter a restricted area undetected.
Leaving infected USB drives for employees to find.
Impersonating IT personnel to gain access.
"Baiting Attacks" typically involve what?
Direct phone calls to trick victims.
Leaving infected storage devices (like USB sticks) for employees to find and connect to their machines.
Impersonating a bank to steal login credentials.
Redirecting users to malicious websites.
What characterizes "Pretexting Attacks"?
They always come from unknown senders.
They abuse the trust between the victim and someone the victim knows, often by impersonating them.
They involve physical presence to steal data.
They only target public Wi-Fi users.
What is "Shoulder-Surfing Attacks"?
An attack that manipulates a browser to redirect users.
An attacker positioning themselves behind an individual in a public place to observe them entering passwords or sensitive information.
An attack that targets specific websites with malware.
An attack that uses false alarms and fictitious threats.
"Quid Pro Quo" social engineering attacks involve what?
Tricking users into granting permissions to malicious cloud applications.
A promise of a financial reward to convince an employee to perform a malicious action.
Impersonating a customer support agent on social media.
Stealing the PINs of ATM users.
What is a "Watering Hole Attack"?
An attack that involves sending fraudulent email messages.
An attacker infecting a website regularly visited by employees to steal information or distribute malware.
An attack that redirects internet traffic to phony web servers.
An attack where victims are bombarded with false alarms.
Which social engineering technique involves victims being bombarded with false alarms and fictitious threats, often prompting them to install unwanted software?
DNS spoofing.
Physical breaches.
Scareware.
Vishing.
What is one of the signs of a social engineering attack related to emotional manipulation?
The sender can easily prove their identity.
The offer feels too good to be true.
Your emotions are heightened (e.g., fear, excitement, anger).
The request is calm and not urgent.
What is the best defense against social engineering attacks, particularly targeting the human factor?
Installing only advanced firewalls.
Social engineering awareness training and creating a security-first culture.
Relying solely on automated detection systems.
Ignoring suspicious messages to avoid engagement.
Which of the following is a Norton-suggested procedure to mitigate social engineering attacks related to securing accounts?
Sharing passwords with trusted colleagues.
Using weak, easily memorable passwords.
Using two-factor authentication and strong, unique passwords.
Disabling spam filters.
