SY0-701 · Question #298
The security operations center is researching an event concerning a suspicious IP address. A security analyst looks at the following event logs and discovers that a significant portion of the user…
The correct answer is A. Spraying. Password spraying is a type of attack where an attacker tries a small number of commonly used passwords across a large number of accounts. The event logs showing failed login attempts for many user accounts from the same IP address are indicative of a password spraying attack…
Question
The security operations center is researching an event concerning a suspicious IP address. A security analyst looks at the following event logs and discovers that a significant portion of the user accounts have experienced failed log-in attempts when authenticating from the same IP address:
Which of the following most likely describes the attack that took place?
Exhibit
Options
- ASpraying
- BBrute-force
- CDictionary
- DRainbow table
How the community answered
(34 responses)- A79% (27)
- B12% (4)
- C6% (2)
- D3% (1)
Explanation
Password spraying is a type of attack where an attacker tries a small number of commonly used passwords across a large number of accounts. The event logs showing failed login attempts for many user accounts from the same IP address are indicative of a password spraying attack, where the attacker is attempting to gain access by guessing common passwords.
Community Discussion
No community discussion yet for this question.