Exam GCIH All QuestionsBrowse all questions from this exam
Question 135

A spike in Event ID 4625 is found in Windows event logs. Looking at individual accounts across the domain, no more than 5 failed logins are found for any single account. What is a likely explanation for this?

    Correct Answer: B

    A spike in Event ID 4625 in Windows event logs indicates a high number of failed login attempts. If no more than 5 failed logins are found for any single account across the domain, it suggests that multiple accounts are being targeted with a common password. This pattern is characteristic of a password spraying attack, where an attacker tries a small number of commonly used passwords against many different accounts.

Discussion
[Removed]Option: B

Answer: B

SazeniyuOption: B

Answer is B

XBalOption: B

Answer is B.

davidkocOption: B

come on