Password Cracking Countermeasures EHE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the role of logging and monitoring in defending against password cracking?

   • ATo prevent attackers from accessing the network
   • BTo detect repeated failed login attempts and alert administrators
   • CTo encrypt passwords in transit
   • DTo automatically change passwords for all users
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which algorithm is specifically designed to be computationally expensive and resistant to GPU-based brute-force attacks?

   • AArgon2
   • BSHA-1
   • CAES
   • DMD5
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary purpose of an account lockout policy?

   • ATo temporarily disable an account after multiple failed login attempts
   • BTo require users to change passwords regularly
   • CTo encrypt the password database
   • DTo prevent users from forgetting their passwords
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A company wants to implement MFA for a legacy application that does not support modern protocols. The application currently uses LDAP authentication. The security team must choose a solution that adds a second factor without rewriting the application. Which approach is most appropriate?

   • AEnable MFA directly in the LDAP directory by adding a second attribute for the one-time code.
   • BPlace an identity-aware proxy in front of the application that enforces MFA and then passes the authenticated session to the application.
   • CReplace the legacy application with a modern application that supports MFA natively.
   • DModify the application's LDAP bind to require a one-time password in the password field.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company is revising its password policy. The security team wants to reduce the risk of offline brute-force attacks against the password database while also minimizing the chance that users will reuse passwords across systems. Which combination of measures best achieves both goals?

   • ARequire 8-character passwords with complexity, store them as unsalted SHA-256 hashes, and mandate password changes every 30 days.
   • BRequire 10-character passwords without complexity, store them as salted MD5 hashes, and rely on user training to avoid reuse.
   • CRequire 16-character passwords, store them as plaintext in an encrypted database, and enforce a 90-day rotation policy.
   • DRequire 12-character passwords with complexity, store them as salted bcrypt hashes, and provide a password manager to all employees.
   Reveal Solution Discussion Select an answer first