Menu

Brute Force Attacks

Card 1 of 17 0 got it 0 still learning
Question
TapClick or press space to see the answer
Answer
All 17 cards in this set
What is meant by two-factor authentication?
Using two different factor types, such as a password and a code sent to a phone
What is meant by a strong password?
A long password that uses uppercase, lowercase, numbers and symbols
What is meant by credentials?
The login details, such as a username and password, for an account
Which details can brute force software be used to guess?
Usernames, passwords and PINs
What is a brute force attack?
Automated software guessing passwords by trial and error
Which of these passwords would a brute force attack guess most quickly?
123456
Roughly how fast can brute force software try passwords?
Thousands or millions of guesses each second
An account shows thousands of failed login attempts in one minute. What does this most likely mean?
A brute force attack is being attempted
Which password change would best protect an account from a brute force attack?
Making it longer and mixing letters, numbers and symbols
Why does every extra character make a password harder for brute force software to crack?
It multiplies the number of possible combinations
How does limiting the number of login attempts help protect an account?
The account locks or delays after a set number of wrong tries
Why might an attacker carry out a brute force attack on a company website?
To steal personal information from the company's accounts
Brute force software tries password123 before it tries random combinations of characters. Why?
It tries likely passwords and common patterns first
An attacker tries the same common password against thousands of different usernames on a website. What is happening?
The same password is being tried against many accounts
Why is a person guessing a password by hand at a keyboard not a serious threat?
They cannot make guesses fast enough to find the password
Why does adding numbers and symbols as well as letters make a password harder to guess?
There are more choices for every character in it
Why does two-factor authentication protect an account even if the password is guessed?
The account cannot be opened without the second factor