Why might a network admin receive failed login attempts from unknown IP addresses on port 22?

The correct answer is B. Brute-force attack. Port 22 is used by SSH (Secure Shell). Repeated failed login attempts from unknown or external IP addresses on this port are the hallmark of an automated brute-force attack, where an attacker systematically tries username/password combinations to gain access. A DoS attack (A)…

Cloud Network Security

Question

Options

ADoS attack
BBrute-force attack
CDNS amplification
DVLAN hopping

How the community answered

(24 responses)

A
4% (1)
B
92% (22)
C
4% (1)

Explanation

Port 22 is used by SSH (Secure Shell). Repeated failed login attempts from unknown or external IP addresses on this port are the hallmark of an automated brute-force attack, where an attacker systematically tries username/password combinations to gain access. A DoS attack (A) aims to overwhelm the service, not authenticate to it. DNS amplification (C) is a reflection-based DDoS technique unrelated to SSH logins. VLAN hopping (D) is a Layer 2 attack exploiting trunk port misconfigurations - it would not appear as SSH login failures on port 22.

Topics

#Brute-force attack#SSH#Network security#Authentication

Community Discussion

No community discussion yet for this question.

Full CNX-001 Practice