Home / ECCouncil / ECSS

Question list

List of questions

Question 1

(0)

Below are the various steps involved in forensic readiness planning. l .Keep an incident response team ready to review the incident and preserve the evidence. 2 .Create a process for documenting t

Question 2

(0)

James is a professional hacker attempting to gain access to an industrial system through a remote control device. In this process, he used a specially designed radio transceiver device to sniff radi

Question 3

(0)

While investigating a web attack on a Windows-based server, Jessy executed the following command on her system: C:\> net view <10.10.10.11> What was Jessy's objective in running the above

Question 4

(0)

Identify the backup mechanism that is performed within the organization using external devices such as hard disks and requires human interaction to perform the backup operations, thus, making it sus

Question 5

(0)

Michael, a forensic expert, was assigned to investigate an incident that involved unauthorized intrusion attempts. In this process, Michael identified all the open ports on a system and disabled the

Question 6

(0)

Alana, an employee in an organization, took a short break after spending exhausting hours on a project. For relaxation, she went to a cafeteria with her laptop, where she connected to the public Int

Question 7

(0)

Bob, a security professional, was recruited by an organization to ensure that application services are being delivered as expected without any delay. To achieve this. Bob decided to maintain differe

Question 8

(0)

Peter, a network defender, was instructed to protect the corporate network from unauthorized access. To achieve this, he employed a security solution for wireless communication that uses dragonfly k

Question 9

(0)

Which of the following environmental controls options saves the hardware from humidity and heat, increases hardware performance, and maintains consistent room temperature?

Question 10

(0)

Martin, a hacker, aimed to crash a target system. For this purpose, he spoofed the source IP address with the target's IP address and sent many ICMP ECHO request packets to an IP broadcast network,

Question 26 - ECSS discussion

Johnson is a professional hacker who targeted an organization's customers and decided to crack their system passwords. In this process, he found a list of valid customers, created a list of possible passwords, ranked the passwords from high to low probability, and started keying in each password in the target system until the correct password is discovered.

Identify the type of attack performed by Johnson in the above scenario.

Password guessing

Rainbow table attack

Dictionary attack

Brute force attack

Suggested answer: C

Explanation:

The scenario described involves Johnson using a list of possible passwords, which he has ranked by probability, and systematically entering them into the system to discover the correct one. This method is known as a dictionary attack, where an attacker uses a prearranged list of likely passwords---often derived from lists of common passwords or phrases---and tries them one by one. This is different from a brute force attack, which would involve trying all possible combinations, and a rainbow table attack, which uses precomputed hash values to crack encrypted passwords.Password guessing is a less systematic approach that doesn't necessarily involve a ranked list of passwords.Reference: The information provided aligns with the knowledge domains of the EC-Council Certified Security Specialist (E|CSS) program, which includes understanding various types of attacks and their methodologies as part of the ethical hacking and network defense curriculum1.

The scenario described involves Johnson, who has a list of valid customers and a list of possible passwords ranked by probability, which he uses to systematically attempt to log in to the target system. This method is known as adictionary attack. In a dictionary attack, the hacker uses a list of likely passwords---often derived from lists of common passwords or phrases---and tries them one by one. This differs from a brute force attack, which involves trying all possible combinations of characters until the correct one is found.

A dictionary attack is more efficient than brute force because it relies on the likelihood that people will use common words or phrases for passwords, making it a targeted approach based on probability rather than random attempts. Therefore, the correct answer is C, as it best describes the technique used by Johnson in the given scenario.

Show Answer

asked 24/10/2024

rayan rayanalbanna

44 questions

Your answer: A B C D

0 comments

Sorted by