Exam 312-50v13 topic 1 question 208 discussion

Actual exam question from ECCouncil's 312-50v13

Question #: 208
Topic #: 1

As a certified ethical hacker, you are performing a system hacking process for a company that is suspicious about its security system. You found that the company’s passwords are all known words, but not in the dictionary. You know that one employee always changes the password by just adding some numbers to the old password. Which attack is most likely to succeed in this scenario?

A. Brute-Force Attack
B. Password Spraying Attack
C. Hybrid Attack
D. Rule-based Attack

Show Suggested Answer

Suggested Answer: C 🗳️

by Dogeo at Feb. 16, 2025, 11:27 p.m.

Comments

Submit Cancel

KnightHeart

1 month ago

Selected Answer: D

" passwords are all known words, but not in the dictionary.' mean it is not hybrid attack. D seem more perfer.

upvoted 1 times

...

mulekule

2 months, 1 week ago

Selected Answer: C

While Rule-based is also strong, Hybrid Attack is the best answer based on: The passwords are based on known (but modified) words. There's a known pattern of slight modifications (like adding numbers). Hybrid attacks are designed for this kind of situation—where brute force is too broad, but dictionary alone is too limited.

upvoted 1 times

...

hiddenmessages

2 months, 1 week ago

Selected Answer: D

This is taught in OSCP and CPTS training. This is rule-based attacking. You apply a rule like if the old password for the targeted user is "NewPassword123!" The rule would be NewPassword[RULE]. Trick question, since this is a hacking exam, it's rule based

upvoted 1 times

...

ehsarx

3 months, 2 weeks ago

Selected Answer: D

Rule based attack is sophisticated by the use of patterns to guess the password. Hybrid works by combining dictionary attack and some pattern. Yet the words are not dictionary based. I think D is correct

upvoted 1 times

...

marcel9999

3 months, 2 weeks ago

Selected Answer: C

This type of attack depends on the dictionary attack. Often, people change their passwords merely by adding some numbers to their old passwords.

upvoted 3 times

...

Dogeo

4 months, 1 week ago

Selected Answer: C

Since the passwords are based on common words with slight modifications (like numbers added at the end), the Hybrid Attack is the best choice to efficiently crack them.

upvoted 3 times

...