Which attack method primarily targets stored passwords or biometric templates at the host?

• A. Replay attack
• B. Host attack
• C. Pilfering
• D. Injection attack

Answer: (B)

The correct answer, focusing on "Host attack," relates to the specific nature of attacks that directly aim at compromising the integrity or confidentiality of data stored on a host system. In this context, stored passwords and biometric templates reside on host systems, making them key targets for malicious actors.

A host attack typically involves unauthorized access to a system where sensitive information, such as passwords or biometric data, is kept. Attackers might exploit vulnerabilities in the host's operating system or applications to gain access to this stored information. By breaching the host, they can retrieve or manipulate these sensitive credentials without needing to actively intercept their transmission, which is a fundamental characteristic of attacks directed at stored data.

This makes the choice of "Host attack" particularly relevant, as it accurately describes the method targeting information at rest on the system itself. Other methods mentioned do not specifically focus on this type of stored data breach in the same way. For example, replay attacks primarily deal with intercepting and reusing legitimate requests from users but do not typically target stored passwords directly. Pilfering, while it does involve unauthorized access to information, is more general and does not specifically refer to attacks on stored passwords or biometric templates. Injection attacks are often about manipulating input to exploit vulnerabilities in applications