Password Cracking Techniques and Countermeasures ECSS Practice Questions (Page 8)

Questions 36–38

1. 36expert · hard

   A security architect is designing a new authentication system for a high-security environment. The system must store passwords securely and be resistant to both offline and online attacks. The architect has decided to use a slow key derivation function. Which additional countermeasure is most important to implement alongside the slow KDF?

   • AUse a faster hashing algorithm to improve user experience
   • BImplement rate limiting on the login endpoint
   • CUse a longer salt for each user
   • DStore the hashes in a separate database
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which tool is specifically designed to crack passwords using GPU acceleration and supports a wide range of attack modes?

   • AHydra
   • BBurp Suite
   • CHashcat
   • DAircrack-ng
   Reveal Solution Discussion Select an answer first
3. 38foundation · easy

   Which statement best describes the role of password cracking in a security assessment?

   • AIt is a reactive measure used only after a security breach has occurred
   • BIt is a method to permanently disable user accounts that have weak passwords
   • CIt is a technique to encrypt passwords so they cannot be read by attackers
   • DIt is a proactive measure to test the resilience of passwords against common attack methods
   Reveal Solution Discussion Select an answer first