System Hacking Module 05 Quiz

What is the main goal of the 'Gaining Access' stage in system hacking?

Which technique is NOT typically used for hiding files during a hacking attempt?

What type of password attack involves directly communicating with the victim machine?

Which of the following is an example of a Non-Electronic Attack?

Which of the following techniques is used in the 'Escalating Privileges' stage of system hacking?

What action can an attacker perform using a USB drive after exploiting PassView?

Which of the following describes a replay attack?

What is a characteristic of wire sniffing as an attack method?

What is the main purpose of a rainbow table in password cracking?

Which of the following is NOT a recommended defense against password cracking?

What is a method to increase password security before encryption?

What type of privilege escalation refers to gaining higher privileges than currently possessed?

Which of the following is a recommended defense against privilege escalation?

What is the primary purpose of executing malicious applications during an attack?

Which password practice should be avoided to enhance security?

What is the primary method used in a dictionary attack?

What does a brute forcing attack primarily rely on?

Which of the following best describes the action performed during a password guessing attack?

What is a default password?

How does a Trojan/Spyware/Keylogger attack typically operate?

An attacker uses offline attacks to crack passwords on the victim's machine directly.

In a dictionary attack, the software attempts to crack passwords by using a pre-defined list of words.

Trojan/Spyware/Keylogger attacks do not require any action from the victim to collect user credentials.

Attackers often include default passwords in their lists for password guessing attacks.

Brute forcing attacks try every possible password combination until they find the correct one.

Hiding files is a goal of system hacking aimed at concealing an attacker's activities.

A passive online attack involves directly communicating with the victim machine.

Shoulder surfing is classified as a non-electronic password attack.

Brute forcing attacks are a type of passive online attack.

The goal of escalating privileges in system hacking is to maintain remote access to the system.

Wire sniffing is relatively easy to perpetrate.

A rainbow table contains precomputed hash values for passwords.

In a replay attack, the attacker captures packets and re-sends authentication tokens to gain access.

PassView stores passwords in an encrypted format on the attacker’s USB drive.

To defend against password cracking, it is recommended to use passwords that can be found in a dictionary.

Using a random string as a prefix or suffix with the password before encrypting is a recommended practice.

Vertical privilege escalation involves assuming the identity of another user with the same privileges.

Locking out an account after too many incorrect password guesses helps prevent brute force attacks.

Encrypting sensitive data is not a necessary defense against privilege escalation.

Attackers may execute malicious applications to gather information or maintain unauthorized access to systems.

Shoulder surfing is considered a type of active online password attack.

Brute forcing attacks are primarily based on pre-defined lists of words.

The primary method used in password guessing attacks involves direct communication with the victim's system.

A passive online attack allows an attacker to communicate with the authorizing party.

Encrypting sensitive data is a recommended defense against password cracking.

PassView executed from a USB drive stores passwords in .TXT files on the targeted computer.

Wire sniffing is considered relatively hard to perpetrate.

A rainbow table attack can crack passwords easily by comparing captured hashes to a precomputed table.

A replay attack involves sending previously captured packets back onto the network to gain access.

An offline attack involves the attacker trying to crack passwords on their own system after copying the target's password file.

In a brute forcing attack, the attacker makes educated guesses about the password based on prior knowledge.

To enhance security, it is advised to use system default passwords.

Trojan/Spyware/Keylogger attacks collect user credentials by running in the background and sending data to the attacker.

Password guessing attacks have a high success rate due to the wide range of passwords used.

Default passwords provided by manufacturers are often targeted in password guessing attacks.

Using encryption techniques to protect sensitive data is not a necessary defense against privilege escalation.

Horizontal privilege escalation refers to gaining higher privileges than currently possessed.

Locking out an account after too many incorrect password guesses is an effective measure to prevent brute force attacks.

Performing debugging using bounds checkers and stress tests is a recommended measure to defend against privilege escalation.

Attackers executing malicious applications is called 'owning' the system.

What is the primary goal during the 'Executing Applications' stage of system hacking?

Which technique is primarily associated with the 'Hiding Files' goal within system hacking?

What distinguishes passive online attacks from active online attacks in password cracking?

Which type of attack is shoulder surfing categorized under?

What is a primary method used in the escalation of privileges during hacking?

What is a recommended method to limit potential privilege escalation in a system?

Which type of privilege escalation involves assuming the same privileges of another user?

Which password-related practice should be avoided to enhance security?

How can servers best defend against brute force attacks on user accounts?

What is one of the main purposes of executing malicious applications during an attack?

What is a characteristic of a passive online attack such as wire sniffing?

Which of the following is a key step in performing a rainbow table attack?

What must an attacker typically possess to execute a Man-in-the-Middle (MITM) attack?

What distinguishes a replay attack from other methods of password cracking?

Which attack involves using a list of potential passwords that have been ranked based on probability?

What is the main function of a rainbow table in the context of an offline attack?

Which option best describes a brute forcing attack?

In an active online attack using Trojan/Spyware/Keylogger, what is the first step taken by the attacker?

What role do default passwords play in password guessing attacks?

The primary goal of escalating privileges in system hacking is to bypass access controls to gain initial access to the system.

Wire sniffing is an example of an active online attack where the attacker communicates directly with the victim's machine.

Social engineering is classified as a non-electronic attack that requires technical knowledge.

Brute forcing attacks involve systematically trying every possible password combination until the correct one is found.

The clearing of logs is an activity aimed at covering tracks during system hacking.

Vertical privilege escalation refers to acquiring the same level of privileges that already has been granted.

Implementing multi-factor authentication and authorization can help defend against privilege escalation attacks.

Running users and applications on the least privileges is not a recommended strategy against privilege escalation.

An attacker may execute malicious programs remotely to maintain unauthorized access to a system by 'owning' it.

A privilege separation methodology is used to increase the scope of programming errors and bugs.

In a dictionary attack, the attacker relies solely on the specific knowledge of the target's password history to create the dictionary file.

The failure rate for password guessing attacks is typically low due to the structured approach the attacker takes in creating potential passwords.

Trojan/Spyware/Keylogger attacks necessitate active participation from the victim to collect user credentials successfully.

Using pre-computed hashes, such as those in a rainbow table, is not applicable in offline attacks as they rely on real-time interaction with the target's system.

Default passwords are commonly utilized by attackers in dictionary attacks to increase the success rate of their password guessing efforts.

In a wire sniffing attack, the captured data may include sensitive information such as passwords and emails, making it easy to recover them.

A replay attack is characterized by an attacker acquiring access to communication channels between the victim and server to extract information.

Setting a password change policy to 30 days is a recommended defense against password cracking.

PassView is designed to save passwords in an encrypted format, ensuring their security when stored on a USB drive.

Rainbow table attacks rely on precomputed tables containing a list of possible passwords and their hash values, making it easier to crack passwords.

Which of the following techniques is primarily used in the 'Hiding Files' stage of system hacking?

Shoulder surfing is an example of an active online attack.

What is the main goal of the 'Escalating Privileges' stage in system hacking?

In password cracking, _____ attacks involve the attacker trying to gain access without communicating with the victim machine.

Match the following types of password attacks with their descriptions:

Which method allows an attacker to collect user credentials from a victim's machine without the victim's knowledge?

A dictionary attack relies on a predefined list of common passwords to attempt access.

What is a common use of default passwords by attackers?

In a brute forcing attack, the software tries every possible __________ until the password is cracked.

Which of the following methods is used to gain access during a replay attack?

Match the following password attack methods with their descriptions:

Wire sniffing is considered easy to perpetrate.

What is the primary purpose of a rainbow table in relation to password cracking?

The attacker executes _____ to extract stored passwords when using PassView.

Match the type of attack with its description:

What is a primary defense against privilege escalation?

Vertical privilege escalation allows an attacker to acquire the same level of privileges as another user.

What should be done to an account that has too many incorrect password attempts?

Using a random string as a ______ or suffix with the password enhances security before encryption.

Match the types of privilege escalation with their definitions: