Which monitoring activity would best help detect a password spraying attack?

Monitoring for a single failed login attempt on one account

Watching for unusually long passwords in logs

Tracking multiple failed login attempts across many user accounts from a single source IP

Checking for the presence of password hash files on servers

GIAC Certified Incident Handler

Domain 4Objective 1

Attacking Passwords GCIH Practice Questions (Page 9)

Part of the Credential and Access Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~17–29 in this domain), expect 6–10 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

8concepts

Questions 41–41

41foundation · easy
Which monitoring activity would best help detect a password spraying attack?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCIH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIH” is a trademark of its owner, used for identification only.

Attacking Passwords GCIH Practice Questions (Page 9)

Questions 41–41

Which monitoring activity would best help detect a password spraying attack?

Keep studying — Credential and Access Security