Exam N10-008 topic 1 question 548 discussion

A, dictionary is based on common passwords

If there's a leak, would you need brute force?

From Google, the main difference between a brute force attack and a dictionary attack is that in a brute force attack, a hacker tries to crack a password using every possible combination of characters, whereas, in a dictionary attack, the hacker tries a list of known or commonly used passwords.

C. Phishing Phishing attacks involve tricking individuals into divulging sensitive information, such as usernames and passwords, by posing as a trustworthy entity. When there are global leakages of users' passwords, attackers may use the leaked passwords in phishing campaigns, making the phishing attempts more convincing. Users who have had their passwords leaked in previous breaches may be more susceptible to falling for phishing attacks that reference their compromised credentials.

A dictionary attack uses a list of likely passwords for guessing, which often come from leaks and breaches. If a user’s password is leaked and included in this list, the attacker can potentially gain access to their account more quickly compared to a brute-force attack.

Correct Answer is A Dictionary, """global leakages of users’ passwords"""let's pay attention here

"Dictionary attacks: An attack cycles through words from a dictionary or common passwords from other data breaches." Source: https://www.csoonline.com/article/569513/brute-force-attacks-explained-and-why-they-are-on-the-rise.html

its A yall overthinking it and adding background personl knolage that the test dont gaf about

A Brute Force attack tries all combinations of characters until one works, while a Dictionary attack narrows down the combinations to a list of common or KNOWN passwords, which can contain popular and leaked passwords.

Dictionary, Spraying Attack, Rainbow Tables all part of Brute force attack. when you passwords leak people will add them to their dictionary file and either use brute force or use spraying attack. in any case it is called a Brute Force attack Passed Sec+, CYSA+ and A+. Came back for my Net+

I agree with Alizadeh's reasoning. People choosing dictionary attacks are assuming too much about the type of passwords leaked.

I am selecting Dictionary attack on this because: Brute Force attack usually creates a strategically randomized list of words to attempt to get the right password. However, a Dictionary attack uses specific words and is not random at all. In the question the attacker has leaked passwords and add this into the Password attack.

Brute-force attacks involve trying all possible combinations of passwords until the correct one is found. Global leakages of users' passwords, such as through data breaches, provide attackers with a larger pool of potential passwords to try, making brute-force attacks more effective and potentially quicker in gaining unauthorized access to accounts or systems.

I am more leaning towards the B, brute force. The dictionary is about the vulnerability where the user might use common words.

Dictionary