easyMultiple ChoiceObjective-mapped
SSCP Practice Question: Based on the exhibit, what type of attack is most…
Exhibit
Refer to the exhibit. The following is from a Windows security log: Event ID 4625 (Logon Failure) Account Name: multiple different usernames Source Network Address: 10.10.10.10 Failure Reason: Unknown user name or bad password. Multiple such entries appear within a short time span, each with a different username but the same source IP.
Based on the exhibit, what type of attack is most likely occurring?
⚠ Common exam trap
Candidates often confuse dictionary attacks (many passwords, one user) with password spraying (one password, many users), as both use a wordlist but differ in the attack vector and lockout avoidance strategy.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Password spraying attack
The exhibit shows a scenario where an attacker attempts a small number of common passwords (e.g., one or a few) against many different usernames. This low-and-slow approach avoids triggering account lockout policies, which is the hallmark of a password spraying attack. Unlike dictionary attacks (many passwords on a single user) or brute-force attacks (exhaustive password guessing on one account), password spraying targets multiple accounts with commonly used passwords to increase success rates while staying under detection thresholds.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Brute-force attack
Why it's wrong here
Brute-force usually tries many passwords on a single account, not multiple usernames with the same password.
- ✗
Pass-the-hash attack
Why it's wrong here
Pass-the-hash uses stolen NTLM hashes to authenticate, not interactive login attempts.
- ✗
Dictionary attack
Why it's wrong here
A dictionary attack also typically targets one account with many common passwords.
- ✓
Password spraying attack
Why this is correct
Password spraying attempts one or a few common passwords across many accounts, matching the pattern.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SSCP question from scratch — 920 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.