nerdexam
CiscoCisco

200-201 · Question #90

200-201 Question #90: Real Exam Question with Answer & Explanation

The correct answer is B: Someone is trying a brute force attack on the network. Event ID 4625 in the Windows Security log signifies a failed logon attempt. It often indicates that someone, possibly an attacker, is attempting to log in to a system or network using invalid credentials. This event code is commonly associated with failed login attempts due to in

Submitted by daniela_cl· Mar 6, 2026Host-Based Analysis

Question

What causes events on a Windows system to show Event Code 4625 in the log messages?

Options

  • AThe system detected an XSS attack
  • BSomeone is trying a brute force attack on the network
  • CAnother device is gaining root access to the system
  • DA privileged user successfully logged into the system

Explanation

Event ID 4625 in the Windows Security log signifies a failed logon attempt. It often indicates that someone, possibly an attacker, is attempting to log in to a system or network using invalid credentials. This event code is commonly associated with failed login attempts due to incorrect usernames or passwords, and it can suggest potential brute force attacks where an attacker tries various login combinations to gain unauthorized access.

Topics

#Windows logs#Event ID 4625#Brute-force attack#Host analysis

Community Discussion

No community discussion yet for this question.

Full 200-201 PracticeBrowse All 200-201 Questions