Splunk SPLK-5001 Exam - Topic 7 Question 11 Discussion

Actual exam question for Splunk's SPLK-5001 exam

Question #: 11
Topic #: 7

An analyst is examining the logs for a web application's login form. They see thousands of failed logon attempts using various usernames and passwords. Internet research indicates that these credentials may have been compiled by combining account information from several recent data breaches.

Which type of attack would this be an example of?

ACredential sniffing

BPassword cracking

CPassword spraying

DCredential stuffing

Show Suggested Answer

Suggested Answer: D

by Paris at Sep 18, 2024, 06:26 PM

Limited Time Offer

25%

Off

Get Premium SPLK-5001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sheron

4 months ago

Really? Thousands of attempts? Seems a bit exaggerated.

upvoted 0 times

...

Sunny

5 months ago

I thought it was just a random attack, but this makes sense!

upvoted 0 times

...

Dulce

5 months ago

Wait, are we sure it's not password cracking?

upvoted 0 times

...

Barney

5 months ago

Definitely D, that's how they roll these days.

upvoted 0 times

...

Terry

5 months ago

Sounds like credential stuffing to me!

upvoted 0 times

...

Shawnna

5 months ago

I’m confused between credential stuffing and password spraying; both involve trying multiple credentials, right?

upvoted 0 times

...

Gracia

6 months ago

This sounds like a practice question we did on credential stuffing, where attackers use leaked credentials to try logging in.

upvoted 0 times

...

Tarra

6 months ago

I’m not entirely sure, but I remember something about password cracking being more about guessing passwords rather than using stolen ones.

upvoted 0 times

...

Erin

6 months ago

I think this might be credential stuffing since they’re using a lot of usernames and passwords from breaches.

upvoted 0 times

...

Johana

6 months ago

I'm pretty confident this is a credential stuffing attack. The attacker is exploiting the fact that people often reuse the same credentials across multiple accounts.

upvoted 0 times

...

Barney

6 months ago

Hmm, this is a tricky one. I'm leaning towards password spraying, since the attacker seems to be using a large number of common passwords against multiple usernames, rather than targeting specific accounts.

upvoted 0 times

...

Pamella

6 months ago

Credential stuffing is the way to go here. The attacker is automatically trying a large number of username and password combinations, likely obtained from previous data breaches, to see which ones work on the target system.

upvoted 0 times

...

Hermila

6 months ago

I'm a bit confused on the difference between credential stuffing and password cracking. I'll need to review the definitions of these attack types to make sure I select the right answer.

upvoted 0 times

...

Rozella

6 months ago

This seems like a classic credential stuffing attack. The attacker is trying to use stolen credentials from other breaches to gain unauthorized access to the web application.

upvoted 0 times

...

Delsie

2 years ago

Gotta be password cracking, right? All those failed attempts sound like a good old-fashioned brute force attack to me. Hackers these days, they really put the 'cracking' in 'password cracking'.

upvoted 0 times