[CCCure CISSP] Access Control - Brute Force Attack (Nimal Gunarathna)

[Ali Jawad]

Hi
You were right about the answer see this for calculating the number of
attempts http://mandylionlabs.com/documents/BFTCalc.xls

About Ivan's answer, it is about choosing the "best" answer :)

Regards

On Mon, Feb 15, 2010 at 10:42 PM, Ivan Sabo <ivan.sabo at yahoo.co.uk> wrote:
> Hi Nimal,
>
> I am sure you are right and the correct answer is 10000
> due to the exponential 10^4 = 10000. In spite of this,
> C can be correct as well as you do not need to use up all
> attempts to find the right password ;o)
>
> Cheers
>
> [!v at n]
>
> Ivan Sabo
> -----------------------------------------------------------
> blog >> http://blogujem.nebezpecne.info
> twitt > @nebezpecne
> -----------------------------------------------------------
> :o)
>
>
>> ----------------------------------------------------------------------
>>
>> Message: 1
>> Date: Sun, 14 Feb 2010 09:05:10 -0800 (PST)
>> From: Nimal Gunarathna <ng949 at yahoo.com>
>> To: cisspstudy at cccure.org
>> Subject: [CCCure CISSP] Access Control - Brute Force Attack
>> Message-ID: <23436.97454.qm at web33908.mail.mud.yahoo.com>
>> Content-Type: text/plain; charset="iso-8859-1"
>>
>> Hello Everyone, I have a question for you all?
>> 1. If the password is made up of 4 numeric characters, how many attempts?? ?needed for a?successful?brute force attack?
>> A. 10000B. 11110C. 1024D. 11100
>> What I think:?Every numeric character has 10 choices. Then 4 characters 10^4 = 10000 choices andthe answer should be A. ?But the right answer is B. How is that possible??? ? ? ? ? ? ? ? ? ??? ?
>> -------------- next part --------------
>> An HTML attachment was scrubbed...
>> URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20100214/e2df41e0/attachment-0001.html>
>>
>> ------------------------------
>
>
>
>
> _______________________________________________
> CISSPstudy mailing list
> CISSPstudy at cccure.org
> http://cccure.org/mailman/listinfo/cisspstudy_cccure.org
>