A company is designing a comprehensive defense against password spraying and credential stuffing attacks. Which of the following controls are effective? Select all that apply.

Monitor for logins from unusual locations or IP addresses

Block all traffic from foreign countries

Require users to change passwords every 30 days

Implement account lockout after a reasonable number of failed attempts

Enforce MFA for all user accounts

What is the defining characteristic of a password spraying attack?

It tries a small number of common passwords against many user accounts

It tries many passwords against a single user account

It uses previously breached username/password pairs

It captures password hashes from network traffic

GIAC Certified Incident Handler

Domain 4Objective 1

Attacking Passwords GCIH Practice Questions (Page 5)

Part of the Credential and Access Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~17–29 in this domain), expect 6–10 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

8concepts

Questions 21–25

21application · medium
An incident responder discovers that an attacker used stolen Kerberos service tickets to access a database server. The tickets were captured from a compromised user's session. Which attack technique is this?
Select an answer first
22expert · hard · select all that apply
A company is designing a comprehensive defense against password spraying and credential stuffing attacks. Which of the following controls are effective? Select all that apply.
Select an answer first
23foundation · easy
In a Kerberos environment, which type of ticket is often targeted in a pass-the-ticket attack to gain long-term access?
Select an answer first
24foundation · easy
What is the defining characteristic of a password spraying attack?
Select an answer first
25foundation · easy
Which password cracking technique involves systematically trying every possible combination of characters until the correct password is found?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIH” is a trademark of its owner, used for identification only.

Attacking Passwords GCIH Practice Questions (Page 5)

Questions 21–25

An incident responder discovers that an attacker used stolen Kerberos service tickets to access a database server. The tickets were captured from a compromised user's session. Which attack technique is this?

A company is designing a comprehensive defense against password spraying and credential stuffing attacks. Which of the following controls are effective? Select all that apply.

In a Kerberos environment, which type of ticket is often targeted in a pass-the-ticket attack to gain long-term access?

What is the defining characteristic of a password spraying attack?

Which password cracking technique involves systematically trying every possible combination of characters until the correct password is found?

Keep studying — Credential and Access Security