Study. uk . com
  1. Home
  2. All questions
  3. Question 456

CompTIA Security+ study material · question 456 of 611

An attacker tries the password "Autumn2026!" against several thousand accounts, one attempt each. Which attack is this, and why does it work?

  1. Credential stuffing; the credentials came from another breach
  2. Offline cracking; the hashes were stolen first
  3. A dictionary attack; the password is a known word
  4. Password spraying; it stays under per-account lockout thresholds
Show the answer

Answer: D. Password spraying; it stays under per-account lockout thresholds

Spreading attempts across accounts rather than concentrating them on one is what evades lockout.

Challenge yourself on this topic → Study as cards