exam questions

Exam 98-367 All Questions

View all questions & answers for the 98-367 exam

Exam 98-367 topic 1 question 121 discussion

Actual exam question from Microsoft's 98-367
Question #: 121
Topic #: 1
[All 98-367 Questions]

Your password is 1Vu*cI!8sT.
Which attack method is your password vulnerable to?

  • A. Rainbow table
  • B. Brute force
  • C. Spidering
  • D. Dictionary
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Scryptic
Highly Voted 3 years, 11 months ago
Rainbow tables ARE used for cracking hashes BUT, passwords aren't stored in plain text, they are stored as hashes. Brute force is also an option, However, this is a 10 character password of a good mix of characters. which may take as long as 3,000 years to crack. Dictionary, No. This isn’t a word based password. Spidering, No, falls into the realm of a Dictionary attack. By a process of elimination, we rule out Dictionary, Spidering, and Brute Force. This leaves Rainbow tables. In a nutshell this is how Rainbow tables work: You pre-compute a list of all possible password combination based on the complexity requirement of the organization if known. You run your list of hashes from the acquired password database, against the RainBow table. The MD5 Hash of our password: 1Vu*cI!8sT is f3b1bc59ea0de1ca56304b3fb64b53a7 I search for this hash in my rainbow table, and when I find: f3b1bc59ea0de1ca56304b3fb64b53a7 I now know my victims password is: 1Vu*cI!8sT (The table lists WORD/HASH) Rainbow tables are the only method to which this strong password is vulnerable.
upvoted 6 times
...
spaaamtastic
Highly Voted 5 years, 4 months ago
rainbow table would involve hashes, i feel like this should be Brute Force which would involve alpha-numberic characters
upvoted 5 times
...
Krisbert
Most Recent 4 years, 2 months ago
B. Brute force, because the password is short. Rainbow Table is wrong, since those tables are used for cracking hashes (see also https://en.wikipedia.org/wiki/Rainbow_table)
upvoted 1 times
...
MCSA11
4 years, 8 months ago
A. Rainbow table
upvoted 1 times
cefibo
4 years, 4 months ago
Why not Brute force?
upvoted 1 times
rinost
4 years, 3 months ago
brute force is trying every possible password. no one would guess this password
upvoted 1 times
eXspir3
4 years, 2 months ago
"No one would guess this password" is a very bad argument against brute force attacks. Bruteforce attacks against passwords containing more than 8 characters with special, alpha, and numeric characters was generally seen as not trivial as there are to many combinations A FEW YEARS AGO. As this Question was probably made a while ago and this password contains 10 characters. I would go with rainbow tables. But keep in mind that today - a 10 character password like this is probably crackable by high networth individuals or companys with a lot of server hardware
upvoted 1 times
...
...
...
...
sbcmonteur
5 years, 2 months ago
Correct answer is indeed 'rainbow table'.
upvoted 4 times
...
haralamc
5 years, 4 months ago
two passwords can produce the same hash.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...