MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What is a rainbow table primarily used for in cybersecurity?
a. Encrypting user data
b. Storing plaintext passwords
c. Cracking password hashes using precomputed values
d. Generating secure cryptographic keys
Answer: c. Cracking password hashes using precomputed valuestechtarget+1
Which of the following best describes a rainbow table attack?
a. An online attack where passwords are guessed in real-time
b. A side-channel attack measuring power consumption
c. An offline attack using precomputed hash chains to reverse hashes
d. A social engineering technique to trick users
Answer: c. An offline attack using precomputed hash chains to reverse hashesfreetimelearning+1
How does a rainbow table attack differ from a brute force attack?
a. Rainbow table attacks try all possible combinations
b. Brute force attacks use precomputed tables
c. Rainbow table attacks are faster due to precomputed hash tables
d. Brute force attacks are less resource-intensive
Answer: c. Rainbow table attacks are faster due to precomputed hash tablesexamradar+1
What is the primary purpose of salting in password security?
a. To encrypt passwords during transmission
b. To prevent rainbow table attacks by adding unique random data
c. To compress password databases
d. To increase password length visibly
Answer: b. To prevent rainbow table attacks by adding unique random datahuntress+1
Which cryptographic concept does a rainbow table exploit?
a. Weak encryption algorithms
b. Reversible hash functions
c. Identical hash outputs for identical passwords
d. Public key infrastructure flaws
Answer: c. Identical hash outputs for identical passwordswikipedia+1
What makes rainbow tables effective against unsalted password hashes?
a. They use machine learning to predict passwords
b. They rely on the deterministic nature of hash functions
c. They intercept network traffic during login
d. They exploit buffer overflow vulnerabilities
Answer: b. They rely on the deterministic nature of hash functionstechtarget+1
Which defense mechanism renders rainbow tables ineffective?
a. Using short, simple passwords
b. Implementing account lockout policies
c. Adding unique salts to each password before hashing
d. Disabling password complexity requirements
Answer: c. Adding unique salts to each password before hashinglinkedin+1
What is a major limitation of rainbow table attacks?
a. They only work on encrypted passwords
b. They are ineffective against salted hashes
c. They require physical access to the server
d. They cannot be automated
Answer: b. They are ineffective against salted hashespaubox+1
Which of the following hash functions is most vulnerable to rainbow table attacks?
a. bcrypt
b. Argon2
c. MD5
d. scrypt
Answer: c. MD5proton+1
What is the role of reduction functions in rainbow tables?
a. To decrypt encrypted passwords
b. To convert hash values back into potential plaintext passwords
c. To compress the size of password databases
d. To generate random salts
Answer: b. To convert hash values back into potential plaintext passwordswikipedia+1
Why are modern password hashing algorithms like bcrypt resistant to rainbow tables?
a. They automatically include salting and are computationally intensive
b. They store passwords in plaintext for faster access
c. They use shorter hash lengths
d. They disable user authentication after one login
Answer: a. They automatically include salting and are computationally intensivehuntress+1
What is the main advantage of using a rainbow table over a simple hash table?
a. It uses less storage space through optimized chains
b. It can decrypt any encryption algorithm
c. It works only with biometric data
d. It requires no computational resources
Answer: a. It uses less storage space through optimized chainslinkedin+1
Which attack method is most similar to a rainbow table attack?
a. Phishing
b. Dictionary attack
c. Man-in-the-middle
d. DNS spoofing
Answer: b. Dictionary attackfuturelearn+1
What happens when two users have the same password without salting?
a. Their password hashes will be identical
b. The system automatically locks both accounts
c. The passwords are encrypted twice
d. The login process becomes faster
Answer: a. Their password hashes will be identicaltechtarget+1
How should salts be stored in a secure system?
a. In a separate physical location from hashes
b. Encrypted with the user’s password
c. Alongside the hashed password in the database
d. Deleted immediately after hashing
Answer: c. Alongside the hashed password in the databaseauth0+1
What characteristic should a secure salt possess?
a. Predictable and sequential
b. Short and alphanumeric
c. Long, random, and unique per user
d. Shared across all user accounts
Answer: c. Long, random, and unique per userpaubox+1
Which of the following is NOT a defense against rainbow table attacks?
a. Using password salts
b. Implementing strong password policies
c. Storing passwords in plaintext
d. Using modern key derivation functions
Answer: c. Storing passwords in plaintexttechtarget+1
What is the primary weakness of unsalted password hashing?
a. Increased storage requirements
b. Vulnerability to precomputed hash attacks
c. Slower authentication process
d. Incompatibility with mobile devices
Answer: b. Vulnerability to precomputed hash attackswikipedia+1
How does salting affect identical passwords in a database?
a. They produce different hash values
b. They are automatically flagged for review
c. They are rejected during registration
d. They are encrypted with different keys
Answer: a. They produce different hash valuesauthgear+1
What is the purpose of a reduction function in rainbow table construction?
a. To reduce the number of login attempts
b. To map hash values back to potential plaintext
c. To compress the final hash output
d. To eliminate duplicate passwords
Answer: b. To map hash values back to potential plaintexttechtarget+1
Which of the following best describes the space-time tradeoff in rainbow tables?
a. They use more storage to reduce computation time
b. They use less storage and less computation time
c. They eliminate the need for hashing
d. They increase both storage and computation time
Answer: a. They use more storage to reduce computation timelinkedin+1
What type of attack is a rainbow table attack classified as?
a. Online active attack
b. Passive eavesdropping
c. Offline attack
d. Denial-of-service
Answer: c. Offline attackkeepersecurity+1
Which security practice complements salting to further protect passwords?
a. Using weak hash functions
b. Implementing multi-factor authentication
c. Disabling account lockout
d. Sharing salts across users
Answer: b. Implementing multi-factor authenticationjetpack+1
What is the primary goal of a rainbow table attack?
a. To intercept live network traffic
b. To quickly crack hashed passwords using precomputed tables
c. To guess passwords through social engineering
d. To exploit software vulnerabilities in login forms
Answer: b. To quickly crack hashed passwords using precomputed tablesscribd+1
Why are long, complex passwords more resistant to rainbow table attacks?
a. They are never stored in databases
b. They increase the size of required rainbow tables exponentially
c. They disable hashing mechanisms
d. They automatically enable two-factor authentication
Answer: b. They increase the size of required rainbow tables exponentially1kosmos+1
What happens during the password verification process with salting?
a. The system removes the salt before hashing
b. The same salt is combined with the entered password and hashed
c. The salt is encrypted with the user’s public key
d. The salt is regenerated for each login attempt
Answer: b. The same salt is combined with the entered password and hashedgeeksforgeeks+1
Which of the following is a characteristic of an effective password hashing scheme?
a. Fast computation to improve login speed
b. Use of unsalted MD5 or SHA-1
c. Incorporation of unique salts and computational slowness
d. Storage of passwords in readable format
Answer: c. Incorporation of unique salts and computational slownessproton+1
How do rainbow tables handle password complexity?
a. They automatically generate stronger passwords
b. They become less effective as password complexity increases
c. They bypass complexity requirements entirely
d. They convert complex passwords to simple ones
Answer: b. They become less effective as password complexity increases1kosmos+1
What is the relationship between hash functions and rainbow tables?
a. Rainbow tables eliminate the need for hash functions
b. Rainbow tables depend on predictable hash function outputs
c. Hash functions decrypt rainbow table data
d. Rainbow tables are used to create stronger hash functions
Answer: b. Rainbow tables depend on predictable hash function outputstechtarget+1
Which defense strategy involves adding random data to passwords before hashing?
a. Encryption
b. Salting
c. Compression
d. Tokenization
Answer: b. Saltingexamradar+1
What makes a salted hash more secure than an unsalted one?
a. It allows faster password recovery
b. It ensures uniqueness even for identical passwords
c. It reduces database storage requirements
d. It simplifies the login process
Answer: b. It ensures uniqueness even for identical passwordsauthgear+1
Which of the following scenarios is most vulnerable to rainbow table attacks?
a. A system using bcrypt with unique salts
b. A database storing unsalted MD5 password hashes
c. An application with multi-factor authentication
d. A service requiring 20-character passphrases
Answer: b. A database storing unsalted MD5 password hasheshuntress+1
What is the primary reason rainbow tables have declined in effectiveness?
a. Widespread use of salting and modern hashing algorithms
b. Decreased internet bandwidth
c. Legal restrictions on password cracking
d. Universal adoption of biometric authentication
Answer: a. Widespread use of salting and modern hashing algorithmshuntress+1
How does the length of a salt affect security?
a. Shorter salts provide better protection
b. Salt length has no impact on security
c. Longer salts increase protection against attacks
d. Salts should match password length exactly
Answer: c. Longer salts increase protection against attacksauth0+1
What is a key difference between rainbow table and dictionary attacks?
a. Rainbow table attacks use precomputed hash chains, while dictionary attacks use word lists
b. Dictionary attacks are always offline, while rainbow table attacks are online
c. Rainbow table attacks require physical access
d. Dictionary attacks use cryptographic salts
Answer: a. Rainbow table attacks use precomputed hash chains, while dictionary attacks use word listsswimlane+1
Which of the following is true about rainbow table construction?
a. It requires generating chains of hash and reduction function applications
b. It involves encrypting the entire password database
c. It depends on breaking the hash function’s mathematical structure
d. It uses machine learning to predict user behavior
Answer: a. It requires generating chains of hash and reduction function applicationswikipedia+1
What security principle does salting primarily enforce?
a. Confidentiality through encryption
b. Uniqueness and randomness in stored credentials
c. Availability of authentication services
d. Non-repudiation of user actions
Answer: b. Uniqueness and randomness in stored credentialspaubox+1
Why can’t a single rainbow table crack all password hashes?
a. Because each table is designed for specific hash functions and character sets
b. Because rainbow tables are illegal in most countries
c. Because all passwords are automatically salted
d. Because hashing algorithms change daily
Answer: a. Because each table is designed for specific hash functions and character setsstudocu+1
What is the role of the hash function in password storage?
a. To create a reversible encryption of the password
b. To generate a fixed-size, irreversible representation of the password
c. To compress the password for efficient storage
d. To encrypt the password with a public key
Answer: b. To generate a fixed-size, irreversible representation of the passwordtechtarget+1
How does multi-factor authentication mitigate rainbow table attack risks?
a. By making password hashes longer
b. By requiring additional verification beyond the password
c. By automatically salting all passwords
d. By disabling password-based login
Answer: b. By requiring additional verification beyond the passwordjetpack+1
What is a potential drawback of using very large rainbow tables?
a. They require significant storage space
b. They weaken the hash function
c. They slow down legitimate logins
d. They automatically expire after 24 hours
Answer: a. They require significant storage spacelinkedin+1
Which of the following best describes a hash collision?
a. Two different inputs producing the same hash output
b. A failed login attempt due to wrong password
c. Two users having the same salt value
d. A network connection timeout during authentication
Answer: a. Two different inputs producing the same hash outputtechtarget+1
What is the primary purpose of using a slow hashing algorithm?
a. To make brute force and precomputation attacks more difficult
b. To speed up the login process
c. To reduce database storage requirements
d. To enable real-time password decryption
Answer: a. To make brute force and precomputation attacks more difficultproton+1
How does password policy enforcement help prevent rainbow table attacks?
a. By encouraging longer, more complex passwords that increase precomputation difficulty
b. By automatically salting all passwords
c. By eliminating the need for hashing
d. By storing passwords in plaintext for auditing
Answer: a. By encouraging longer, more complex passwords that increase precomputation difficulty1kosmos+1
What is the relationship between password entropy and rainbow table effectiveness?
a. Higher entropy passwords reduce rainbow table effectiveness
b. Entropy has no impact on rainbow table attacks
c. Low entropy passwords are immune to rainbow tables
d. Entropy only affects online attacks
Answer: a. Higher entropy passwords reduce rainbow table effectivenessdatadome+1
Which of the following is NOT a characteristic of a secure password hashing system?
a. Use of unique salts for each password
b. Fast computation to improve user experience
c. Resistance to precomputation attacks
d. Use of memory-hard functions
Answer: b. Fast computation to improve user experienceproton+1
What security benefit does combining salting with slow hashing provide?
a. It makes precomputed attacks impractical and time-consuming
b. It enables password recovery for administrators
c. It reduces the need for complex passwords
d. It allows faster database queries
Answer: a. It makes precomputed attacks impractical and time-consuminghuntress+1
How do modern authentication systems typically store passwords?
a. As salted, slow-hashed values using algorithms like bcrypt or Argon2
b. In plaintext for easy retrieval
c. Encrypted with a single master key
d. Using fast hash functions like MD5 without salts
Answer: a. As salted, slow-hashed values using algorithms like bcrypt or Argon2proton+1
What is the primary limitation of relying solely on password complexity?
a. It doesn’t prevent attacks on unsalted hashes of complex passwords
b. Complex passwords are always immune to cracking
c. It eliminates the need for hashing
d. It automatically enables multi-factor authentication
Answer: a. It doesn’t prevent attacks on unsalted hashes of complex passwords1kosmos+1
Which comprehensive strategy best protects against rainbow table attacks?
a. Using salted hashes with slow, memory-hard functions and multi-factor authentication
b. Storing passwords in plaintext with access logs
c. Using fast hash functions with short salts
d. Relying solely on user education about password selection
Answer: a. Using salted hashes with slow, memory-hard functions and multi-factor authenticationhuntress+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info