Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Splunk Exam SPLK-5001 Topic 7 Question 11 Discussion

Actual exam question for Splunk's SPLK-5001 exam

Question #: 11
Topic #: 7

[All SPLK-5001 Questions]

An analyst is examining the logs for a web application's login form. They see thousands of failed logon attempts using various usernames and passwords. Internet research indicates that these credentials may have been compiled by combining account information from several recent data breaches.

Which type of attack would this be an example of?

ACredential sniffing

BPassword cracking

CPassword spraying

DCredential stuffing

Show Suggested Answer

Suggested Answer: D

by Paris at Sep 18, 2024, 06:26 PM

Limited Time Offer

25%

Off

Get Premium SPLK-5001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Delsie

2 months ago

Gotta be password cracking, right? All those failed attempts sound like a good old-fashioned brute force attack to me. Hackers these days, they really put the 'cracking' in 'password cracking'.

upvoted 0 times

Alton

24 days ago

D) Credential stuffing

upvoted 0 times

...

Francine

25 days ago

D) Credential stuffing

upvoted 0 times

...

Alpha

1 months ago

D) Credential stuffing

upvoted 0 times

...

Leota

1 months ago

C) Password spraying

upvoted 0 times

...

Bettina

1 months ago

C) Password spraying

upvoted 0 times

...

Delmy

1 months ago

B) Password cracking

upvoted 0 times

...

Frederick

1 months ago

A) Credential sniffing

upvoted 0 times

...

Vallie

1 months ago

B) Password cracking

upvoted 0 times

...

Emile

2 months ago

A) Credential sniffing

upvoted 0 times

...

...

Sheron

3 months ago

I'm not sure, but I think it could also be password spraying. What do you guys think?

upvoted 0 times

...

Felicitas

3 months ago

I'm going with D. Credential stuffing. It's like a hacker's version of 'spaghetti against the wall' - throw a bunch of creds and see what sticks.

upvoted 0 times

...

Tijuana

3 months ago

Hmm, I'd say it's credential stuffing. Those breached credentials are being used to test the login form - no guesswork involved.

upvoted 0 times

Rolf

1 months ago

Credential stuffing is a common attack method using breached credentials.

upvoted 0 times

...

Alfred

2 months ago

Definitely credential stuffing, using known credentials to gain unauthorized access.

upvoted 0 times

...

Barrett

2 months ago

Yeah, credential stuffing makes sense in this scenario.

upvoted 0 times

...

Mary

2 months ago

I agree, it sounds like credential stuffing.

upvoted 0 times

...

...

Eugene

3 months ago

I agree with Daniel. Credential stuffing makes sense given the scenario.

upvoted 0 times

...

Hoa

3 months ago

C'mon, this is a no-brainer. Password spraying is the obvious choice here. All those failed attempts using different creds? That's a textbook case.

upvoted 0 times

Kathrine

2 months ago

Yeah, credential stuffing wouldn't involve trying different usernames and passwords like that.

upvoted 0 times

...

Idella

2 months ago

I agree, it's definitely a password spraying attack.

upvoted 0 times

...

...

Daniel

3 months ago

I think this would be an example of credential stuffing.

upvoted 0 times

...

az-700 pass4success az-104 200-301 200-201 cissp 350-401 350-201 350-501 350-601 350-801 350-901 az-720 az-305 pl-300

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77