MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Password cracking refers to what cybersecurity process?
   a. Encrypting sensitive data
   b. Guessing or recovering passwords from stored data
   c. Installing new security patches
   d. Monitoring web traffic
   Answer: b. Guessing or recovering passwords from stored datawikipedia​
2. Which tool is commonly used for password cracking?
   a. Wireshark
   b. Nessus
   c. Hashcat
   d. Nmap
   Answer: c. Hashcatwikipedia​
3. Brute-force attacks work by:
   a. Exploiting software vulnerabilities
   b. Trying all possible password combinations
   c. Using social engineering
   d. Exploiting default credentials
   Answer: b. Trying all possible password combinationsproofpoint​
4. A dictionary attack works by:
   a. Using precompiled common passwords or phrases
   b. Trying random key combinations
   c. Exploiting unpatched systems
   d. Using phishing techniques
   Answer: a. Using precompiled common passwords or phrasesproofpoint​
5. The most time-consuming type of attack is:
   a. Dictionary
   b. Rainbow table
   c. Brute-force
   d. Social engineering
   Answer: c. Brute-forceproofpoint​
6. Rainbow table attacks rely on:
   a. Precomputed hash values
   b. Random password guesses
   c. Social engineering tricks
   d. Network scanning
   Answer: a. Precomputed hash valueswebasha​
7. Which tool can perform rainbow table attacks?
   a. Burp Suite
   b. Ophcrack
   c. Metasploit
   d. Wireshark
   Answer: b. Ophcrackwebasha​
8. Hybrid attacks combine:
   a. Malware and phishing
   b. Dictionary and brute-force techniques
   c. Rainbow and phishing attacks
   d. SQL injection and brute-force
   Answer: b. Dictionary and brute-force techniqueswebasha​
9. Credential stuffing exploits:
   a. Default credentials on routers
   b. Reused username-password pairs
   c. Insecure API tokens
   d. VPN routing misconfigurations
   Answer: b. Reused username-password pairswebasha​
10. Which tool is often used for credential stuffing?
    a. Snipr
    b. Burp Suite
    c. Nmap
    d. Hydra
    Answer: a. Sniprwebasha​
11. Phishing-based cracking involves:
    a. Decrypting secure data
    b. Tricking users into revealing passwords
    c. Using hardware-based keyloggers
    d. Hacking encrypted databases
    Answer: b. Tricking users into revealing passwordswebasha​
12. Keylogging is primarily used to:
    a. Block certain websites
    b. Record user keystrokes
    c. Encrypt communications
    d. Prevent brute-force attacks
    Answer: b. Record user keystrokeswebasha​
13. Shoulder surfing relies on:
    a. Social media profiling
    b. Physical observation during password entry
    c. Network sniffing
    d. Malware execution
    Answer: b. Physical observation during password entrywebasha​
14. Which is a non-technical password cracking method?
    a. Keylogging
    b. Shoulder surfing
    c. Rainbow table attack
    d. Brute force
    Answer: b. Shoulder surfingwebasha​
15. A hybrid attack adds what to dictionary words?
    a. Encryption
    b. Numbers or symbols
    c. Firewalls
    d. Antivirus signatures
    Answer: b. Numbers or symbolswebasha​
16. The purpose of a brute-force attack is to:
    a. Bypass encryption algorithms
    b. Try every possible password combination
    c. Modify password policies
    d. Create strong password hashes
    Answer: b. Try every possible password combinationssh​
17. John the Ripper is an example of a:
    a. Password recovery tool
    b. Antivirus software
    c. Network scanner
    d. Log analyzer
    Answer: a. Password recovery toolwikipedia​
18. One way to defend against brute-force attacks is to:
    a. Block repeated failed logins
    b. Disable antivirus software
    c. Allow open access
    d. Use short passwords
    Answer: a. Block repeated failed loginsproofpoint​
19. Reverse brute-force attacks use:
    a. A stolen password to find usernames
    b. Network sniffing
    c. SQL injection
    d. Cross-site scripting
    Answer: a. A stolen password to find usernamesssh​
20. A password hash is:
    a. An unencrypted password
    b. A mathematical representation of a password
    c. A password salt
    d. A username token
    Answer: b. A mathematical representation of a passwordwikipedia​
21. The time-memory tradeoff used in rainbow tables means:
    a. More memory reduces time to crack passwords
    b. It increases storage cost
    c. It improves encryption
    d. It requires no computation
    Answer: a. More memory reduces time to crack passwordswebasha​
22. A complex password primarily prevents:
    a. Social engineering
    b. Brute-force attacks
    c. SQL injection attacks
    d. Network sniffing
    Answer: b. Brute-force attacksssh​
23. Which attack uses look-up tables of precomputed hashes?
    a. Rainbow table
    b. Dictionary
    c. Phishing
    d. Brute-force
    Answer: a. Rainbow tablewebasha​
24. Which tool supports multiple hash types like MD5, SHA-1, and WPA2?
    a. Cain & Abel
    b. Hashcat
    c. Aircrack-ng
    d. Nmap
    Answer: b. Hashcatnccs​
25. GPU acceleration in password cracking improves:
    a. Password encryption
    b. Attack speed
    c. Security policies
    d. Malware detection
    Answer: b. Attack speednccs​
26. Cain & Abel can perform:
    a. Password recovery and sniffing
    b. Malware removal
    c. Firewall configuration
    d. Backup management
    Answer: a. Password recovery and sniffingwikipedia​
27. Which method uses a list of leaked credentials?
    a. Credential stuffing
    b. Brute-force
    c. Keylogging
    d. Data exfiltration
    Answer: a. Credential stuffingwebasha​
28. The tool commonly associated with Wi-Fi password cracking is:
    a. Aircrack-ng
    b. Burp Suite
    c. Mitmproxy
    d. Snort
    Answer: a. Aircrack-ngwikipedia​
29. A password salt is used to:
    a. Strengthen password hashes
    b. Reduce password length
    c. Simplify encryption
    d. Bypass firewalls
    Answer: a. Strengthen password hasheswikipedia​
30. Which is the weakest type of password attack defense?
    a. Simple password rotation
    b. Account lockout
    c. Captcha enforcement
    d. Multi-factor authentication
    Answer: a. Simple password rotationssh​
31. RainbowCrack is primarily used for:
    a. Precomputed hash attacks
    b. Network packet analysis
    c. File encryption
    d. DDoS mitigation
    Answer: a. Precomputed hash attackswebasha​
32. Keyloggers are categorized as:
    a. Malware
    b. Antivirus software
    c. Firewalls
    d. Password managers
    Answer: a. Malwarewebasha​
33. Which attack depends on real-time credential interception?
    a. Man-in-the-Middle
    b. Dictionary
    c. Rainbow
    d. Shoulder surfing
    Answer: a. Man-in-the-Middlewebasha​
34. Which defense mechanism combats MitM attacks?
    a. Encryption and certificates
    b. Disabling updates
    c. Removing firewalls
    d. Using weak credentials
    Answer: a. Encryption and certificateswebasha​
35. A mask attack in Hashcat targets:
    a. Password patterns with known structures
    b. Random wordlists
    c. Network firewalls
    d. Malware files
    Answer: a. Password patterns with known structuresnccs​
36. Combining dictionary and mask-based operations is known as:
    a. Hybrid attack
    b. Reverse brute-force
    c. Sequential scanning
    d. Predictive encryption
    Answer: a. Hybrid attacknccs​
37. The main disadvantage of brute-force attacks is:
    a. Speed and time consumption
    b. Portability
    c. Scalability
    d. Automation
    Answer: a. Speed and time consumptionexamradar​
38. GPU-based cracking is faster because GPUs:
    a. Process multiple computations simultaneously
    b. Increase disk space
    c. Decrypt networks
    d. Restrict hashes
    Answer: a. Process multiple computations simultaneouslynccs​
39. Password cracking tools often target:
    a. Hashes stored in database files
    b. Encrypted video files
    c. Firewall rules
    d. Log archives
    Answer: a. Hashes stored in database fileswikipedia​
40. Phishing attacks depend primarily on:
    a. Human psychology
    b. Network speed
    c. Encryption strength
    d. CPU performance
    Answer: a. Human psychologywebasha​
41. Which password cracking attack uses word permutations and numbers?
    a. Hybrid attack
    b. Dictionary
    c. Rainbow
    d. Reverse brute-force
    Answer: a. Hybrid attackwebasha​
42. What does MD5 stand for in hash algorithms?
    a. Message Digest 5
    b. Multi-Domain 5
    c. Machine Data Formula
    d. Managed Digest Function
    Answer: a. Message Digest 5nccs​
43. Which password type is most resistant to cracking?
    a. Long, random, and unique passwords
    b. Sequential numeric passwords
    c. Dictionary-based words
    d. Simple lowercase passwords
    Answer: a. Long, random, and unique passwordsproofpoint​
44. What is one major drawback of rainbow tables?
    a. High storage requirement
    b. Limited password resolution
    c. Ineffective for weak hashes
    d. Dependence on user machines
    Answer: a. High storage requirementwebasha​
45. Ethical hackers use password cracking tools for:
    a. Finding security weaknesses
    b. Spreading malware
    c. Stealing financial data
    d. Encrypting networks
    Answer: a. Finding security weaknesseswebasha​
46. Social engineering differs from technical attacks because it:
    a. Manipulates humans instead of systems
    b. Uses encryption
    c. Relies on cloud computing
    d. Breaks password hashes
    Answer: a. Manipulates humans instead of systemswebasha​
47. Common prevention for credential stuffing is:
    a. Multi-factor authentication
    b. Weak password use
    c. Disabling encryption
    d. Password reuse
    Answer: a. Multi-factor authenticationproofpoint​
48. The most secure password storage technique is:
    a. Salting and hashing
    b. Plain-text storage
    c. CSV storage
    d. Backups in logs
    Answer: a. Salting and hashingwikipedia​
49. Which is not a password cracking method?
    a. SQL injection
    b. Brute-force
    c. Dictionary
    d. Rainbow table
    Answer: a. SQL injectionvinsys​
50. The main reason weak passwords are vulnerable is:
    a. Predictability and reuse
    b. High entropy
    c. Random complexity
    d. Algorithmic security
    Answer: a. Predictability and reusessh​

1. https://en.wikipedia.org/wiki/Password_cracking
2. https://www.proofpoint.com/us/blog/information-protection/password-cracking-techniques-used-in-cyber-attacks
3. https://www.webasha.com/blog/what-are-the-different-types-of-password-cracking-methods-and-how-do-they-work-in-ethical-hacking
4. https://www.ssh.com/academy/types-of-password-attacks-and-how-to-prevent-them
5. https://nccs.gov.in/public/events/Password-cracking.pdf
6. https://examradar.com/password-attacks-on-authentication-in-web-security-mcqs/
7. https://www.vinsys.com/blog/top-30-mcqs-ceh-exam-preparation
8. https://www.sanfoundry.com/cyber-security-questions-answers-password-cracking-security-measures-1/
9. https://letsfindcourse.com/cyber-security-mcq/secure-password-mcq-questions-and-answers
10. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
11. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
12. https://interviewkickstart.com/blogs/articles/cyber-security-mcqs-answers
13. https://www.onelogin.com/learn/6-types-password-attacks
14. https://www.scribd.com/document/524434738/mcq-questions-on-cyber-security
15. https://www.beyondtrust.com/blog/entry/password-cracking-101-attacks-defenses-explained
16. https://www.geeksforgeeks.org/ethical-hacking/types-of-cracking/
17. https://www.javaguides.net/2024/04/cyber-security-quiz-mcq-questions-and-answers.html
18. https://www.imperva.com/learn/application-security/brute-force-attack/
19. https://www.sailpoint.com/identity-library/8-types-of-password-attacks
20. https://www.nitttrchd.ac.in/imee/Labmanuals/Password%20Cracking%20of%20Linux%20Operating%20System.pdf