Which statement best describes a brute force attack?

Which statement best describes a brute force attack?

• A. A hacker uses a computer to guess every authentication credential
• B. A hacker uses a social engineering to steal passwords
• C. An attacker injects SQL commands
• D. A user accidentally leaks a password

Answer: (A)

Brute force attacks are about exhaustively trying possible passwords or keys until one works, typically with automation to test many combinations quickly. The statement describes using a computer to guess every authentication credential, which is exactly that idea of systematically trying a vast set of possibilities to gain access. This contrasts with social engineering, which relies on manipulating people to reveal secrets; SQL injection, which exploits database command weaknesses; or simply leaking a password by accident. Understanding brute force also highlights defenses like rate limiting, account lockouts, strong multi-factor authentication, and robust password hashing to make guessing impractical.

Brute force attacks are about exhaustively trying possible passwords or keys until one works, typically with automation to test many combinations quickly. The statement describes using a computer to guess every authentication credential, which is exactly that idea of systematically trying a vast set of possibilities to gain access. This contrasts with social engineering, which relies on manipulating people to reveal secrets; SQL injection, which exploits database command weaknesses; or simply leaking a password by accident. Understanding brute force also highlights defenses like rate limiting, account lockouts, strong multi-factor authentication, and robust password hashing to make guessing impractical.