What is the primary limitation that rate limiting imposes on brute force attacks against cloud authentication endpoints?

It prevents the attacker from knowing valid usernames

It restricts the number of login attempts within a given time period

It encrypts all traffic to the endpoint

A security analyst discovers that several corporate Office 365 accounts were compromised. Investigation shows the passwords used were identical to passwords found in a public breach database. The accounts did not have MFA enabled. Which attack vector most likely explains the compromise?

A phishing campaign that tricked users into entering credentials on a fake login page.

Credential stuffing using previously leaked username/password pairs.

A keylogger installed on each user's workstation.

Password spraying with a list of common passwords.

Why do attackers use credentials leaked from one service to attempt login on a different cloud service?

Because leaked credentials are always valid

Because cloud providers force users to use the same password

Because cloud services share the same password database

Because users often reuse the same password across multiple services

An attacker compromises a cloud identity provider's signing certificate and forges tokens to access a cloud service. Which attack vector is being used?

Credential stuffing with leaked passwords.

Token abuse via compromised federation trust.

Password spraying against the identity provider.

Keylogging the identity provider administrator.

Why might an attacker intentionally slow down the rate of password attempts?

To avoid triggering rate limiting and lockout policies

To increase the chance of guessing the correct password

To avoid using too much bandwidth

GIAC Cloud Penetration Tester

Domain 6Objective 1

Password Attacks on Cloud Environments GCPN Practice Questions (Page 9)

Part of the Credential Attacks and Evasion domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 4–6 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

Questions 41–45

41foundation · easy
What is the primary limitation that rate limiting imposes on brute force attacks against cloud authentication endpoints?
Select an answer first
42application · medium
A security analyst discovers that several corporate Office 365 accounts were compromised. Investigation shows the passwords used were identical to passwords found in a public breach database. The accounts did not have MFA enabled. Which attack vector most likely explains the compromise?
Select an answer first
43foundation · easy
Why do attackers use credentials leaked from one service to attempt login on a different cloud service?
Select an answer first
44application · medium
An attacker compromises a cloud identity provider's signing certificate and forges tokens to access a cloud service. Which attack vector is being used?
Select an answer first
45foundation · easy
Why might an attacker intentionally slow down the rate of password attempts?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCPN” is a trademark of its owner, used for identification only.