[CCCure CISSP] Access Control - Brute Force Attack (Nimal Gunarathna)

[Ivan Sabo]

Hi Nimal,

I am sure you are right and the correct answer is 10000
due to the exponential 10^4 = 10000. In spite of this,
C can be correct as well as you do not need to use up all 
attempts to find the right password ;o)

Cheers

[!v at n]

Ivan Sabo
-----------------------------------------------------------
blog >> http://blogujem.nebezpecne.info
twitt > @nebezpecne
-----------------------------------------------------------
:o)


> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Sun, 14 Feb 2010 09:05:10 -0800 (PST)
> From: Nimal Gunarathna <ng949 at yahoo.com>
> To: cisspstudy at cccure.org
> Subject: [CCCure CISSP] Access Control - Brute Force Attack
> Message-ID: <23436.97454.qm at web33908.mail.mud.yahoo.com>
> Content-Type: text/plain; charset="iso-8859-1"
> 
> Hello Everyone, I have a question for you all?
> 1. If the password is made up of 4 numeric characters, how many attempts?? ?needed for a?successful?brute force attack?
> A. 10000B. 11110C. 1024D. 11100
> What I think:?Every numeric character has 10 choices. Then 4 characters 10^4 = 10000 choices andthe answer should be A. ?But the right answer is B. How is that possible??? ? ? ? ? ? ? ? ? ??? ?
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20100214/e2df41e0/attachment-0001.html>
> 
> ------------------------------