MENU
An analyst is examining the logs for a web application's login form. They see thousands of failed logon attempts using various usernames and passwords. Internet research indicates that these credentials may have been compiled by combining account information from several recent data breaches.
Which type of attack would this be an example of?
Suggested Answer: D
Get Premium SPLK-5001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
SH
Sheron
10 months ago
Really? Thousands of attempts? Seems a bit exaggerated.
SU
Sunny
11 months ago
I thought it was just a random attack, but this makes sense!
DU
Dulce
11 months ago
Wait, are we sure it's not password cracking?
BA
Barney
11 months ago
Definitely D, that's how they roll these days.
TE
Terry
11 months ago
Sounds like credential stuffing to me!
SH
Shawnna
12 months ago
I’m confused between credential stuffing and password spraying; both involve trying multiple credentials, right?
GR
Gracia
12 months ago
This sounds like a practice question we did on credential stuffing, where attackers use leaked credentials to try logging in.
TA
Tarra
12 months ago
I’m not entirely sure, but I remember something about password cracking being more about guessing passwords rather than using stolen ones.
ER
Erin
1 year ago
I think this might be credential stuffing since they’re using a lot of usernames and passwords from breaches.
JO
Johana
1 year ago
I'm pretty confident this is a credential stuffing attack. The attacker is exploiting the fact that people often reuse the same credentials across multiple accounts.
BA
Barney
1 year ago
Hmm, this is a tricky one. I'm leaning towards password spraying, since the attacker seems to be using a large number of common passwords against multiple usernames, rather than targeting specific accounts.
PA
Pamella
1 year ago
Credential stuffing is the way to go here. The attacker is automatically trying a large number of username and password combinations, likely obtained from previous data breaches, to see which ones work on the target system.
HE
Hermila
1 year ago
I'm a bit confused on the difference between credential stuffing and password cracking. I'll need to review the definitions of these attack types to make sure I select the right answer.
RO
Rozella
1 year ago
This seems like a classic credential stuffing attack. The attacker is trying to use stolen credentials from other breaches to gain unauthorized access to the web application.
DE
Delsie
2 years ago
Gotta be password cracking, right? All those failed attempts sound like a good old-fashioned brute force attack to me. Hackers these days, they really put the 'cracking' in 'password cracking'.
AL
Alton
2 years ago
D) Credential stuffing
FR
Francine
2 years ago
D) Credential stuffing
AL
Alpha
2 years ago
D) Credential stuffing
LE
Leota
2 years ago
C) Password spraying
BE
Bettina
2 years ago
C) Password spraying
DE
Delmy
2 years ago
B) Password cracking
FR
Frederick
2 years ago
A) Credential sniffing
VA
Vallie
2 years ago
B) Password cracking
EM
Emile
2 years ago
A) Credential sniffing
SH
Sheron
2 years ago
I'm not sure, but I think it could also be password spraying. What do you guys think?
FE
Felicitas
2 years ago
I'm going with D. Credential stuffing. It's like a hacker's version of 'spaghetti against the wall' - throw a bunch of creds and see what sticks.
TI
Tijuana
2 years ago
Hmm, I'd say it's credential stuffing. Those breached credentials are being used to test the login form - no guesswork involved.
RO
Rolf
2 years ago
Credential stuffing is a common attack method using breached credentials.
AL
Alfred
2 years ago
Definitely credential stuffing, using known credentials to gain unauthorized access.
BA
Barrett
2 years ago
Yeah, credential stuffing makes sense in this scenario.
MA
Mary
2 years ago
I agree, it sounds like credential stuffing.
EU
Eugene
2 years ago
I agree with Daniel. Credential stuffing makes sense given the scenario.
HO
Hoa
2 years ago
C'mon, this is a no-brainer. Password spraying is the obvious choice here. All those failed attempts using different creds? That's a textbook case.
KA
Kathrine
2 years ago
Yeah, credential stuffing wouldn't involve trying different usernames and passwords like that.
ID
Idella
2 years ago
I agree, it's definitely a password spraying attack.
DA
Daniel
2 years ago
I think this would be an example of credential stuffing.