Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council ECSS Exam - Topic 5 Question 41 Discussion

Posted by Virgie on May 05, 2022 at 02:06 PM

Andrew, a bachelor student of Faulkner University, creates a gmail account. He uses 'Faulkner' as the password for the gmail account. After a few days, he starts receiving a lot of e-mails stating that his gmail account has been hacked. He also finds that some of his important mails have been deleted by someone. Which of the following methods has the attacker used to crack Andrew's password?

Each correct answer represents a complete solution. Choose all that apply.

Suggested Answer: A, B, C, E, F

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
14 comments · newest first
JO
Jordan 12 months ago
Brute force? Nah, I think it was just poor password choice.
CH
Chaya 12 months ago
Totally agree, social engineering is a big risk too!
KA
Kaycee 12 months ago
Wait, could it really be a zero-day attack? That seems unlikely.
GE
German 1 year ago
Definitely a dictionary-based attack. 'Faulkner' is too easy!
BE
Ben 1 year ago
Sounds like a classic case of password guessing.
SK
Skye 1 year ago
Social engineering could also be a possibility, especially if someone knew Andrew's personal info. I need to think more about that.
SH
Sharan 1 year ago
I feel like we covered brute force attacks in class, but I'm not convinced that's what happened here. It seems too obvious.
KI
King 1 year ago
I'm not entirely sure, but I think a dictionary-based attack might be relevant since 'Faulkner' is a common word.
RE
Renay 1 year ago
I remember we discussed how simple passwords like 'Faulkner' are really easy to guess, so I think password guessing could be a method used here.
VO
Von 1 year ago
No problem, I've got this. The answer has to be E, ?=, since that's not a standard comparison operator in Splunk.
CA
Carylon 1 year ago
Okay, let me break this down. The key things I remember are that the employees selling the nondeposit investments need to be trained, and the products need to be suitable for the customers. I think the answer is that it's not a requirement to check the history of the employees before hiring them.
CL
Clorinda 1 year ago
I'm a bit confused on this one. I remember learning about the Stored Procedure transformation, but I can't recall the specific port types. I'll have to review the material and make an educated guess.
WY
Wynell 1 year ago
I'm confident the Automatic Replies command is available in Exchange Server accounts. The other options don't sound as familiar to me for that specific feature.
AN
An 1 year ago
This question seems straightforward. I think the answer is C - business architecture enables strategic and organizational alignment of investment options.
0/2000 characters

Save Cancel