Question 1

Due to the limitations of online guessing, most password attacks today use ____.

Accepted Answer

Offline cracking is currently the most effective method for password attacks, since it involves obtaining a hashed version of the password and then using powerful computers to try out different combinations until the correct one is found. This method is not limited by online restrictions and can be carried out even if the target system is not connected to the internet. Online cracking, hash replay, and token replay are all more limited approaches to password attacks.

Question 2

____ accepts spoken words for input as if they had been typed on the keyboard.

Accepted Answer

Speech recognition refers to the ability of a computer or machine to recognize and interpret human speech as input. This technology allows users to input data or control devices through spoken commands rather than typing.

Question 3

Token credentials can be revoked at any time by the user without affecting other token credentials issued to other sites.

Accepted Answer

Token credentials are issued specifically to individual sites and can be revoked by the user at any time without affecting other token credentials issued to other sites.

Question 4

A(n) ____ can also capture transmissions that contain passwords.

Accepted Answer

A protocol analyzer, also known as a network analyzer or packet sniffer, can capture and analyze network traffic at the protocol level. This includes the ability to capture transmissions that contain passwords or other sensitive information. Application analyzers, system analyzers, and function analyzers do not typically have this capability.

Question 5

____ attack is where every possible combination of letters, numbers, and characters is used to create encrypted passwords.

Accepted Answer

Brute force attack is a trial-and-error method that involves testing every possible combination of letters, numbers, and characters to create encrypted passwords. It is a common method used by hackers to gain access to secure systems.

Question 6

The set of letters, symbols, and characters that make up the password are known as a ____ set.

Accepted Answer

The set of letters, symbols, and characters making up a password are referred to as "character set."

Question 7

Using a rainbow table to crack a password requires three steps.

Accepted Answer

A rainbow table attack typically involves two main steps: generating the rainbow table and then using it to match hashed passwords to their plaintext equivalents.

Question 8

Trusted OSs have been used since the late 1960s, initially for government and military applications.

Accepted Answer

The answer of Trusted OSs have been used since the...

Question 9

If a user typically accesses his bank's Web site from his home computer on nights and weekends, then this information can be used to establish a ____ of typical access.

Accepted Answer

The answer of If a user typically accesses his bank's...

Question 10

____ is the time it takes for a key to be pressed and then released.

Accepted Answer

Dwell time is the time it takes for a key to be pressed and then released.

Question 11

To create a rainbow table, each ____ begins with an initial password that is encrypted.

Accepted Answer

Rainbow tables are created by creating a chain of encrypted passwords that link together. Each chain begins with an initial password that is encrypted and then used to generate subsequent passwords in the chain.

Question 12

____ is related to the perception, thought process, and understanding of the user.

Accepted Answer

Cognitive biometrics relates to the user's cognitive processes such as perception, comprehension, and memory. It includes behavioral patterns like mouse movement, typing speed, and language use. It is useful in identifying individuals who may attempt to deceive the system.

Question 13

The weakness of passwords centers on ____.

Accepted Answer

The weakness of passwords primarily centers on human memory because humans tend to use weak passwords that are easy to remember and frequently reused. Additionally, humans may also write down their passwords or share them with others, making them susceptible to being stolen or hacked. While encryption and handshake technologies can play a role in password security, their effectiveness is limited if the password itself is weak or compromised. Human reliability is also a factor in password security, but it is ultimately tied to human memory and behavior.

Question 14

Although brute force and dictionary attacks were once the primary tools used by attackers to crack an encrypted password, today attackers usually prefer ____.

Accepted Answer

Rainbow tables are precomputed tables used to crack encrypted passwords. They can be used for both offline and online attacks and are much faster than brute force or dictionary attacks. Therefore, attackers prefer to use rainbow tables over other methods.

Question 15

Passwords provide strong protection.

Accepted Answer

Passwords can provide some level of protection but they are not foolproof and can be easily hacked or guessed. It is recommended to use strong passwords and two-factor authentication for added security.

Question 16

It is predicted that ____ could become a key element in authentication in the future.

Accepted Answer

Cognitive biometrics involves the use of behavioral and cognitive characteristics such as a user's typing rhythm, mouse movements, and decision-making patterns which are difficult to replicate or imitate. This makes it a strong candidate for future authentication methods. Standard biometrics such as fingerprints or facial recognition have already been widely adopted, while reactive and affective biometrics are still in the research and development phase.

Question 17

____ can use fingerprints or other unique characteristics of a person's face, hands, or eyes (irises and retinas) to authenticate a user.

Accepted Answer

Standard biometrics uses unique characteristics like fingerprints, facial features, hands, and eyes to authenticate a user. Cognitive biometrics is based on a person's behavior and thought patterns, reactive biometrics collects information after an event, and affective biometrics is focused on emotions and mood.

Question 18

Today's operating systems have roots dating back 20 or more years, well before security was identified as a critical process.

Accepted Answer

This statement is true. Many of today's operating systems, such as Microsoft Windows and Unix/Linux, have their roots in the 1980s or earlier. At that time, security was not as much of a concern as it is today, so these operating systems were not designed with security as a top priority. As a result, many of them have vulnerabilities that can be exploited by attackers. It wasn't until much later that the importance of security was recognized and efforts were made to improve the security of operating systems.

Question 19

A ____ is a secret combination of letters, numbers, and/or characters that only the user should know.

Accepted Answer

A password is a secret combination of letters, numbers, and/or characters that only the user should know. Tokens are physical devices that generate temporary codes for authentication. Biometric details are unique physical characteristics like fingerprints or facial recognition that can be used for authentication. A challenge is a method used for authentication that requires the user to provide a specific response.

Question 20

The ____ attack will slightly alter dictionary words by adding numbers to the end of the password, spelling words backward, slightly misspelling words, or including special characters such as @, $, !, or %.

Accepted Answer

The given description matches the characteristics of a hybrid attack, which combines dictionary words with variations such as appending numbers or special characters to increase the search space. Brute force attack tries every possible combination, hash replay attack uses stolen credential hashes to gain access, and network replay attack intercepts and replays network traffic to gain unauthorized access. Therefore, the best choice is D - hybrid attack.

Quiz 10: Authentication and Account Management