Exam SY0-701 topic 1 question 17 discussion

Password spraying is a type of brute-force attack used to gain unauthorized access to user accounts by systematically attempting a small number of commonly used passwords against many user accounts. Unlike traditional brute-force attacks, which attempt many different passwords against a single user account, password spraying involves trying a few commonly used passwords against a large number of accounts.

The repeated use of the password "Spring2023" across multiple accounts (administrator, jsmith, guest, cpolk, fmartin) strongly suggests a password spraying attack. This method involves attempting a single, commonly used or default password across various user accounts. By distributing the attempts across multiple accounts instead of targeting just one, the attacker reduces the likelihood of triggering account lockouts. This approach allows them to avoid detection and bypass the alerts typically associated with brute-force attacks.

Agree with A

Correct answer is A. Password Spraying is a brute force attach that tries a few common passwords against many usernames or accounts. This is effective because it avoids account lockouts and targets weak passwords.

The use of the same password, Spring2023, across various accounts (administrator, jsmith, guest, cpolk, fmartin) is a classic indication of password spraying. Attackers often use this technique with passwords they expect might be used by several users, particularly common or default passwords. This Attack will avoid Account Lockouts, by trying the same password on multiple accounts rather than focusing on a single account, the attacker minimizes the risk of locking out any one user, which would alert the system to a brute-force attack.

A. Password spraying

A. Password spraying

Correct Answer: A

Password spraying is a cyberattack tactic that involves a hacker using a single password to try and break into multiple target accounts.

Correct Answer: A