ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 229 - SY0-701 discussion

Report
Export

The security operations center is researching an event concerning a suspicious IP address A security analyst looks at the following event logs and discovers that a significant portion of the user accounts have experienced faded log-In attempts when authenticating from the same IP address:

Which of the following most likely describes attack that took place?

A.
Spraying
Answers
A.
Spraying
B.
Brute-force
Answers
B.
Brute-force
C.
Dictionary
Answers
C.
Dictionary
D.
Rainbow table
Answers
D.
Rainbow table
Suggested answer: A

Explanation:

Password spraying is a type of attack where an attacker tries a small number of commonly used passwords across a large number of accounts. The event logs showing failed login attempts for many user accounts from the same IP address are indicative of a password spraying attack, where the attacker is attempting to gain access by guessing common passwords.

Reference = CompTIA Security+ SY0-701 study materials, particularly in the domain of identity and access management and common attack vectors like password spraying.

asked 02/10/2024
Rodrigo Valencia
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first