Password Attacks on Cloud Environments GCPN Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which monitoring technique can help detect password spraying attacks by identifying unusual login patterns?

   • AAnalyzing network traffic for encrypted connections
   • BReviewing sign-in logs for multiple failed attempts from a single IP across many accounts
   • CChecking for users with weak passwords
   • DMonitoring for a single failed login on one account
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A penetration tester is attempting to brute force a cloud application's API endpoint. The endpoint has rate limiting of 10 requests per minute per API key, but the tester has obtained multiple valid API keys. The tester also wants to avoid triggering an alert that monitors for unusual login patterns. Which approach is most effective?

   • AAbort the attack because rate limiting makes it impossible.
   • BDistribute the attack across the available API keys and rotate IP addresses.
   • CUse all API keys simultaneously from the same IP.
   • DUse a single API key and send requests as fast as possible.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company's cloud application was breached. The investigation shows that attackers used username/password pairs from a previous breach of a different website to log in. Which attack technique does this describe?

   • ACredential stuffing
   • BPhishing
   • CBrute force
   • DPassword spraying
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A penetration tester is assessing an organization's Microsoft 365 tenant. The tester has a list of valid usernames and wants to test a small set of common passwords against all users without triggering the tenant's smart lockout. The tester must complete the test within a 24-hour window and avoid generating alerts from the identity provider's risk detection. Which approach best satisfies these constraints?

   • AUse a single cloud VM and attempt each password against every user once, waiting 30 minutes between attempts.
   • BUse a single IP address and rotate through all users with one password per hour, then repeat with the next password.
   • CDistribute the attack across multiple cloud VMs in different regions, each targeting a subset of users with a slow, randomized rate.
   • DUse a tool that sends authentication requests through a rotating list of residential proxies, one password per user per day.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A penetration tester is assessing a company's cloud environment. The tester finds a publicly accessible S3 bucket that contains a configuration file with database credentials and an API key. The tester uses these credentials to access the company's internal systems. Which attack vector does this scenario best illustrate?

   • ACredential harvesting via exposed configuration files
   • BCredential stuffing using leaked credentials from a prior breach
   • CToken abuse by stealing a session token from a user's browser
   • DPassword spraying against the cloud identity provider
   Reveal Solution Discussion Select an answer first