Which statement best describes a brute force attack?

• A. A hacker uses a computer to guess every authentication credential
• B. A hacker uses a social engineering to steal passwords
• C. An attacker injects SQL commands
• D. A user accidentally leaks a password

Answer: (A)

Brute force attacks are about exhaustively trying possible passwords or keys until one works, typically with automation to test many combinations quickly. The statement describes using a computer to guess every authentication credential, which is exactly that idea of systematically trying a vast set of possibilities to gain access. This contrasts with social engineering, which relies on manipulating people to reveal secrets; SQL injection, which exploits database command weaknesses; or simply leaking a password by accident. Understanding brute force also highlights defenses like rate limiting, account lockouts, strong multi-factor authentication, and robust password hashing to make guessing impractical.