Ethical Hacking Essentials Practice Test

Which countermeasure is recommended to protect against password cracking?

1. Use passwords that can be found in a dictionary

2. Continue using old passwords

3. Do not use passwords that can be found in a dictionary

4. Allow all users to create their own passwords

The correct answer is: Do not use passwords that can be found in a dictionary

Using passwords that cannot be found in a dictionary is a key recommendation for protecting against password cracking attacks. This is because password cracking tools often utilize dictionaries of common words, phrases, and variations to guess passwords efficiently. If a password is easily derived from dictionary entries, it significantly increases the likelihood of an attacker successfully guessing it. In contrast, creating strong, unique passwords often involves the use of combinations of uppercase and lowercase letters, numbers, and special characters, making them less predictable and harder to crack. This practice significantly increases the complexity and length of the passwords, making them resistant to the methods used by attackers. By avoiding dictionary words, users can better secure their accounts against brute force attacks and other password-cracking techniques.