Password Cracking Countermeasures EHE Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A security analyst notices a spike in failed login attempts against a single user account from many different IP addresses over a short period. The account has MFA enabled. What should the analyst do first?

   • ABlock all traffic from the IP addresses involved and close the case.
   • BIgnore the attempts because MFA will prevent any successful login.
   • CReset the user's password and do nothing else.
   • DTemporarily lock the account and investigate the source of the attempts while reviewing authentication logs.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   How does rate limiting help defend against password cracking attempts?

   • AIt encrypts all network traffic to prevent interception
   • BIt changes the password hash after each failed attempt
   • CIt blocks all login attempts from external networks
   • DIt restricts the number of login attempts per unit of time
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A security analyst is investigating a possible password hash leak. The analyst finds that the attacker downloaded the hash database but has not yet logged in. The database contains salted SHA-256 hashes. The analyst must decide whether to force a mass password reset. Which consideration is most important in this decision?

   • AThe salt prevents the attacker from cracking any passwords, so a reset is unnecessary.
   • BThe attacker has not logged in, so there is no evidence of compromise and a reset would be an overreaction.
   • CThe company should wait until the attacker logs in to confirm the breach before resetting passwords.
   • DSHA-256 is a fast hash, so the attacker may crack many passwords quickly; a mass reset is prudent even without observed logins.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary purpose of implementing password cracking countermeasures in an organization?

   • ATo reduce the risk and impact of unauthorized access through compromised credentials
   • BTo make it impossible for any attacker to guess a password
   • CTo eliminate the need for user authentication in the system
   • DTo ensure that all passwords are stored in plain text for easy recovery
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   An organization discovers that many employees reuse the same password across personal and corporate accounts. The security team wants to reduce the risk of credential stuffing without forcing users to memorize dozens of unique passwords. Which measure is the most effective first step?

   • AIncrease the minimum password length to 20 characters for all accounts.
   • BSend a monthly email reminding users not to reuse passwords.
   • CImplement single sign-on (SSO) so users only need one password.
   • DDeploy a corporate password manager and require its use for all work accounts.
   Reveal Solution Discussion Select an answer first