評価中、ペネトレーション テスターは、対象企業の Web サイトをクロールして 30 個の電子メール アドレスのリストを取得し、電子メール アドレスの形式に基づいて可能なユーザー名のリストを作成します。アカウントのロックアウトを回避するために使用される可能性が最も高い攻撃の種類は、次のうちどれですか?
正解:D
Explanation Password spraying is a type of password guessing attack that involves trying one or a few common passwords against many usernames or accounts. Password spraying can avoid account lockout policies that limit the number of failed login attempts per account by spreading out the attempts over time and across different accounts. Password spraying can also increase the chances of success by using passwords that are likely to be used by many users, such as default passwords, seasonal passwords, or company names. Mask is a type of password cracking attack that involves using a mask or a pattern to generate passwords based on known or guessed characteristics of the password, such as length, case, or symbols. Rainbow is a technique of storing precomputed hashes of passwords in a table that can be used to quickly crack passwords by looking up the hashes. Dictionary is a type of password cracking attack that involves using a wordlist or a dictionary of common or likely passwords to try against an account.