A security team is designing a defense against password spraying. The organization has a large user base and wants to avoid locking out legitimate users. Which strategy is most effective?

Disable accounts after a single failed login

Require a CAPTCHA on every login

Lock out accounts after 2 failed attempts

Implement adaptive authentication that requires additional verification for risky logins

GIAC Cyber Incident Leader

Domain 1Objective 2

Credential Attacks GCIL Practice Questions (Page 12)

Part of the Attack Types and Vectors domain, which makes up ~33% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~17–26 in this domain), expect 3–5 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

9concepts

Questions 56–56

56expert · hard
A security team is designing a defense against password spraying. The organization has a large user base and wants to avoid locking out legitimate users. Which strategy is most effective?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCIL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIL” is a trademark of its owner, used for identification only.

Credential Attacks GCIL Practice Questions (Page 12)

Questions 56–56

A security team is designing a defense against password spraying. The organization has a large user base and wants to avoid locking out legitimate users. Which strategy is most effective?

Keep studying — Attack Types and Vectors