If a token and 4-digit personal identification number (PIN) are used to access a computer system and the token performs off-line checking for the correct PIN, what type of attack is possible?
Suggested Answer: B
Get Premium 312-50 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
GO
Goldie
12 months ago
Birthday attacks are not relevant here, just saying!
KI
Kiley
12 months ago
Wait, can a token really do offline checking? Sounds sketchy.
HE
Hester
12 months ago
The PIN is only 4 digits, so brute force is super easy.
JA
Jade
1 year ago
I think it's more of a man-in-the-middle situation.
ME
Meghann
1 year ago
Definitely a brute force attack.
JA
Janessa
1 year ago
Man-in-the-middle seems off because that usually involves intercepting communications, not just guessing a PIN.
MI
Mireya
1 year ago
I practiced a question similar to this, and I feel like brute force is the most likely answer since the attacker could just keep trying different PINs.
LE
Lezlie
1 year ago
I'm not entirely sure, but I remember something about birthday attacks being more about hashing and collisions, so that doesn't seem right here.
CO
Cory
1 year ago
I think this might be related to brute force attacks since the token checks the PIN offline, allowing multiple attempts without alerting the system.
VE
Verona
1 year ago
Okay, this one seems pretty clear to me. The receptionist's change in mood, frequent sick days, and neglect of duties are classic signs of stress. I'm going to go with option C.
MA
Maricela
1 year ago
Hmm, I'm not too sure about this one. I'll have to think it through carefully. Maybe I should review the material on filtering dashboard content again.