Question 1

Which of the following is not a countermeasure against dictionary attacks?Using three or four different keyboard character types (lowercase, uppercase, numerals, and symbols)Using short passwordsAvoiding common wordsAvoiding industry acronyms

Accepted Answer

Using short passwordsAll too often, a short password is a simple common word. A dictionary attack is designed to quickly discover passwords that use common words. Dictionary attacks can be customized for the intended victim

Question 2

Which of the following attacks typically takes the longest amount of time to complete?

Accepted Answer

Brute force attackA brute force attack is a form of attack that attempts every possible key or password pattern for a message, login prompt, or security file.

Question 3

Which of the following password attacks adds appendages to known dictionary words?

Accepted Answer

HybridA hybrid attack adds appendages to known dictionary words (for example, 1password, password07, and p@ssword1).

Question 4

Which form of cryptanalysis focuses on weaknesses in software, the protocol, or the encryption algorithm?

Accepted Answer

An implementation attack exploits implementation weaknesses, such as in software, the protocol, or the encryption algorithm.

Question 5

Your company produces an encryption device that lets you enter text and receive encrypted text in response. An attacker obtains one of these devices and starts inputting random plaintext to see the resulting ciphertext.

Accepted Answer

Chosen plaintextA chosen plaintext attack is where the attacker chooses the plaintext to be encrypted. This event can occur when a worker steps away from the computer and the attacker sends a message and captures the resulting cipher text. The attacker can select plaintext that will produce clues to the encryption key used.

Question 6

Which of the following best describes a side-channel attack?

Accepted Answer

The attack is based on information gained from the physical implementation of a cryptosystem.

Question 7

Which of the following is an example of a statistical attack against a cryptosystem?

Accepted Answer

Exploiting a computer's inability to produce random numbers

Question 8

In which type of attack does the attacker have access to both the plaintext and the resulting cipher text, but does not have the ability to encrypt the plain text?

Accepted Answer

Known plaintext

Question 9

Why are brute force attacks always successful?

Accepted Answer

They test every possible valid combination.

Question 10

If a birthday attack is successful, meaning the attacker discovers a password that generates the same hash as that captured from a user's login credentials, which of the following is true? (Select two.)

Accepted Answer

The discovered password will allow the attacker to log in as the user, even if the discovered password is not the same as the user's password.A collision was discovered.

Question 11

When an attacker decrypts an encoded message using a different key than was used during encryption, what type of attack has occurred?

Accepted Answer

Key clustering

Question 12

Which of the following is a mathematical attack that targets the complexity of a cryptosystem's algorithm?

Accepted Answer

AnalyticalAn analytic attack is a mathematical that targets the complexity of a cryptosystem's algorithm. The goal of an analytic attack is to break the algorithm

Question 13

Which type of password attack employs a list of pre-defined passwords that it tries against a login prompt or a local copy of a security accounts database?

Accepted Answer

Dictionary

Question 14

If two different messages or files produce the same hashing digest, then a collision has occurred. Which form of cryptographic attack exploits this condition?

Accepted Answer

birthday Attack

Sec 9.4 Cryptographic Attack

Unlock all answers in this set

Haven't found what you need?