Exam SY0-501 topic 1 question 14 discussion

Actual exam question from CompTIA's SY0-501

Question #: 14
Topic #: 1

[All SY0-501 Questions]

Which of the following characteristics differentiate a rainbow table attack from a brute force attack? (Choose two.)

A. Rainbow table attacks greatly reduce compute cycles at attack time.
B. Rainbow tables must include precomputed hashes.
C. Rainbow table attacks do not require access to hashed passwords.
D. Rainbow table attacks must be performed on the network.
E. Rainbow table attacks bypass maximum failed login restrictions.

Show Suggested Answer

Suggested Answer: BE 🗳️

by Texrax at May 5, 2021, 9:13 p.m.

Comments

Submit Cancel

gonation

2 years, 7 months ago

Selected Answer: AB

A is true B is true C is false, the opposite is true D is false, rainbow tables and attacks are mainly performed offline E is tricky. Rainbow tables can crack the password using the hash and bypass login restrictions by not triggering it in the first place. It can not exceed, bypass, or circumvent the MAXIMUM failed login restriction.

upvoted 1 times

...

Texrax

4 years ago

I get B is the 1st correct answer. Can someone explain why the 2nd answer is E not A?

upvoted 3 times

madaraamaterasu

4 years ago

The second correct one it's A.

upvoted 2 times

Toni1258

4 years ago

I think the correct one is E, because rainbow attack si done offline, so will bypass the failed attempts on a server. And it should not be A, because it does not ensure you that the number of tries will be reduced. Because you can't be sure that the correct password hash will be in your file (used in the rainbow attack), so maybe you will not find it

upvoted 7 times

...

19thflo00r

4 years ago

thought the same thing.

upvoted 1 times

...