A penetration tester is assessing a cloud environment and wants to identify valid user credentials. The tester has access to a list of employee email addresses and a set of common passwords. Which attack vector is most appropriate?

Password spraying with the common passwords

Brute force against a single user

Credential stuffing using a breach database

A red team is conducting a password spraying attack against a large organization's Azure AD tenant. The organization has enabled smart lockout and risk-based conditional access policies. The red team must avoid triggering account lockouts and avoid generating alerts that would cause the blue team to respond. Which approach is most likely to succeed while minimizing detection?

Use a botnet of compromised devices with diverse IPs and geographic locations, spraying at random intervals with low volume.

Use a legitimate password management tool to automate the spraying, but from a single IP.

Use a single cloud VM but rotate through a list of proxy IPs, spraying one password per hour.

Use a single cloud VM with a static public IP and spray one password per hour across all users.

GIAC Cloud Penetration Tester

Domain 6Objective 1

Password Attacks on Cloud Environments GCPN Practice Questions (Page 4)

Part of the Credential Attacks and Evasion domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 4–6 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

Questions 16–20

16application · medium
A penetration tester is assessing a cloud environment and wants to identify valid user credentials. The tester has access to a list of employee email addresses and a set of common passwords. Which attack vector is most appropriate?
Select an answer first
17application · medium
A penetration tester is performing a password spraying attack against a cloud service. The service has a lockout policy of 5 failed attempts per 10 minutes. The tester has a list of 1,000 usernames and a list of 20 common passwords. What is the maximum number of passwords that can be tried per username without triggering lockout?
Select an answer first
18application · medium
A security team is investigating a breach where an attacker gained access to a cloud admin account. The investigation reveals that the admin clicked a link in a phishing email that led to a fake Azure AD login page. Which credential harvesting technique was used?
Select an answer first
19foundation · easy
Which attack vector involves compromising a trusted identity provider to gain access to cloud resources that trust it?
Select an answer first
20expert · hard
A red team is conducting a password spraying attack against a large organization's Azure AD tenant. The organization has enabled smart lockout and risk-based conditional access policies. The red team must avoid triggering account lockouts and avoid generating alerts that would cause the blue team to respond. Which approach is most likely to succeed while minimizing detection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.

Password Attacks on Cloud Environments GCPN Practice Questions (Page 4)

Questions 16–20

A penetration tester is assessing a cloud environment and wants to identify valid user credentials. The tester has access to a list of employee email addresses and a set of common passwords. Which attack vector is most appropriate?

A security team is investigating a breach where an attacker gained access to a cloud admin account. The investigation reveals that the admin clicked a link in a phishing email that led to a fake Azure AD login page. Which credential harvesting technique was used?

Which attack vector involves compromising a trusted identity provider to gain access to cloud resources that trust it?

Keep studying — Credential Attacks and Evasion