Which Attack Uses the Same Password Across Multiple Accounts?

A security analyst is reviewing the following logs: Which of the following attacks is most likely occurring? - image

  1. Password spraying Source Reference Answer
  2. Account forgery
  3. Pass-the-hash
  4. Brute-force

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The exam tests your ability to distinguish password spraying from brute-force: one common password against many accounts is spraying, while many passwords against one account is brute-force.

Learn how to identify password spraying from security logs. The community unanimously agrees that repeated attempts with the same password across multiple accounts indicate password spraying, not brute-force.

Choosing brute-force is the most common mistake, because it is a broad category; however, it involves multiple passwords per user, not the same password across many usernames.

Community Discussion (9 comments)

Luchis_69 👍 13 Selected: A
Password spraying is a type of brute-force attack used to gain unauthorized access to user accounts by systematically attempting a small number of commonly used passwords against many user accounts. Unlike traditional brute-force attacks, which attempt many different passwords against a single user account, password spraying involves trying a few commonly used passwords against a large number of accounts.
Oluwatobi4880 👍 1 Selected: A
Spring2023 was sprayed to different accounts
habbeysax 👍 2 Selected: A
The repeated use of the password "Spring2023" across multiple accounts (administrator, jsmith, guest, cpolk, fmartin) strongly suggests a password spraying attack. This method involves attempting a single, commonly used or default password across various user accounts. By distributing the attempts across multiple accounts instead of targeting just one, the attacker reduces the likelihood of triggering account lockouts. This approach allows them to avoid detection and bypass the alerts typically associated with brute-force attacks.
PAWarriors 👍 2 Selected: A
Correct answer is A. Password Spraying is a brute force attach that tries a few common passwords against many usernames or accounts. This is effective because it avoids account lockouts and targets weak passwords.
dbrowndiver 👍 2 Selected: A
The use of the same password, Spring2023, across various accounts (administrator, jsmith, guest, cpolk, fmartin) is a classic indication of password spraying. Attackers often use this technique with passwords they expect might be used by several users, particularly common or default passwords. This Attack will avoid Account Lockouts, by trying the same password on multiple accounts rather than focusing on a single account, the attacker minimizes the risk of locking out any one user, which would alert the system to a brute-force attack.
PukaSudu 👍 2 Selected: A
A. Password spraying
f71cbb0 👍 1 Selected: A
Correct Answer: A
Abcd123321 👍 4 Selected: A
Password spraying is a cyberattack tactic that involves a hacker using a single password to try and break into multiple target accounts.
Yoez 👍 1
Correct Answer: A

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

The log excerpt shows the string "Spring2023" being attempted on administrator, jsmith, guest, cpolk, and fmartin. Comment [3] notes that repeating the same password across multiple accounts strongly suggests password spraying. Comment [1] explains that password spraying systematically tries a small number of common passwords against a large number of accounts. This technique also avoids account lockouts, as noted by comment [5], because no single account receives many failed attempts.

Why the Other Options Are Wrong

  • Brute-force (D) would involve many different passwords against a single account, not one password against many accounts. Comment [4] acknowledges that password spraying is a type of brute-force, but the specific pattern points to spraying.
  • Pass-the-hash (C) is a credential theft technique that reuses a captured password hash, not a password guess.
  • Account forgery (B) involves creating or impersonating accounts, which is not supported by the logs.
Thus, while brute-force is a related family, it does not match the exact behavior shown.

Community Comment Notes

The voting shows 100% agreement on A. Comment [5] highlights that using the same password on many accounts is a classic indication of spraying. Comment [2] simplifies the definition: using a single password to break into multiple target accounts. Comment [6] reinforces the observation: "Spring2023 was sprayed to different accounts." No authoritative comment argued for another answer.

Official Reference

Exam Strategy

Always classify the attack by the relationship between accounts and passwords. If you see one password tried on many accounts, pick password spraying; if many passwords on one account, pick brute-force. Use this distinction to eliminate wrong options quickly.

Related Analysis

A hosting provider needs to prove that its security controls

A-Grade

During an annual review of the system design, an engineer id

S-Grade

As part of new compliance audit requirements, multiple serve

S-Grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide