MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Password spraying is primarily classified as what type of cyberattack?
   a. SQL Injection
   b. Brute Force
   c. Phishing
   d. XSS
   Answer: b. Brute Forcecrowdstrike+1​
2. In a password spraying attack, the attacker uses a single password for:
   a. One account repeatedly
   b. Multiple accounts simultaneously
   c. Random IPs
   d. One application only
   Answer: b. Multiple accounts simultaneouslypaloaltonetworks+1​
3. The main advantage for attackers in password spraying is to:
   a. Bypass account lockout mechanisms
   b. Inject SQL code
   c. Crash servers
   d. Encrypt files
   Answer: a. Bypass account lockout mechanismssentinelone+1​
4. Password spraying attacks are often described as:
   a. Fast brute force
   b. Low-and-slow brute force
   c. Zero-day exploitation
   d. Network flooding
   Answer: b. Low-and-slow brute forcepaloaltonetworks​
5. Which commonly used password might an attacker try in a spray?
   a. Winter2024!
   b. 1234567890
   c. SuperSecurePassword
   d. P@ssPhraseOver9k
   Answer: a. Winter2024!paloaltonetworks​
6. Password spraying is categorized under which MITRE ATT&CK technique ID?
   a. T1059
   b. T1110.003
   c. T1204
   d. T1078
   Answer: b. T1110.003paloaltonetworks​
7. What is typically the first phase in a spraying attack?
   a. Harvesting usernames
   b. Injecting malware
   c. Crafting a phishing email
   d. Data exfiltration
   Answer: a. Harvesting usernamesproton+1​
8. A successful password spray may lead to:
   a. Privilege escalation
   b. DoS attacks
   c. Keylogging
   d. DDoS
   Answer: a. Privilege escalationproton+1​
9. Which tool can automate spraying operations?
   a. MSOLSpray
   b. Hydra
   c. Nmap
   d. Wireshark
   Answer: a. MSOLSprayproton​
10. The attack often targets authentication portals of:
    a. Microsoft 365 and VPNs
    b. Cloud storage APIs
    c. DNS servers
    d. IoT devices
    Answer: a. Microsoft 365 and VPNsproton+1​
11. Which security layer greatly reduces the success of spraying?
    a. MFA
    b. Firewall
    c. Antivirus
    d. IDS
    Answer: a. MFAspecopssoft+1​
12. The time gap between spraying rounds helps attackers:
    a. Avoid detection and lockouts
    b. Exploit zero-days
    c. Increase encryption
    d. Save credentials
    Answer: a. Avoid detection and lockoutsopengenus+1​
13. Password spraying differs from credential stuffing because it:
    a. Doesn’t use stolen credentials
    b. Uses large breach data
    c. Targets one account only
    d. Requires admin access
    Answer: a. Doesn’t use stolen credentialsowasp+1​
14. Common passwords used in spraying include:
    a. Password1
    b. Stronger@2025
    c. ComplexRandom!
    d. MFArequired!
    Answer: a. Password1paloaltonetworks+1​
15. Which enterprise authentication technology is most frequently targeted?
    a. Single Sign-On (SSO)
    b. DNSSEC
    c. VPN encryption
    d. Firewall NAT
    Answer: a. Single Sign-On (SSO)paloaltonetworks​
16. A key indicator of spraying activity is:
    a. High login failures from diverse IPs
    b. Decreased bandwidth
    c. High CPU usage
    d. File corruption
    Answer: a. High login failures from diverse IPssentinelone​
17. Attackers often obtain usernames using:
    a. OSINT
    b. Keyloggers
    c. Spam filters
    d. IDS logs
    Answer: a. OSINTproton+1​
18. Spraying often complements what attack technique?
    a. MFA fatigue
    b. Keylogging
    c. Phishing
    d. Ransomware
    Answer: a. MFA fatiguepaloaltonetworks​
19. A “horizontal brute force” attack refers to:
    a. Password spraying
    b. DDoS
    c. File injection
    d. SQL tampering
    Answer: a. Password sprayingpaloaltonetworks​
20. The ultimate objective of successful spraying is to:
    a. Gain unauthorized access
    b. Monitor network traffic
    c. Delete backups
    d. Bypass antivirus
    Answer: a. Gain unauthorized accessproton+1​
21. Password reuse across systems helps password spraying succeed because:
    a. Common passwords work across accounts
    b. It avoids credential validation
    c. Encryption is disabled
    d. Passwords remain case sensitive
    Answer: a. Common passwords work across accountsproton+1​
22. A good prevention measure is to:
    a. Enforce complex password policies
    b. Disable encryption
    c. Remove MFA
    d. Reduce password length
    Answer: a. Enforce complex password policiesspecopssoft+1​
23. Which user type is most dangerous to compromise via spraying?
    a. Administrator
    b. Guest
    c. Intern
    d. Auditor
    Answer: a. Administratorproton+1​
24. Password spraying typically occurs during which attack stage?
    a. Initial access
    b. Exfiltration
    c. Persistence
    d. Lateral movement
    Answer: a. Initial accesspaloaltonetworks​
25. Attackers use spraying to exploit organizations lacking:
    a. Lockout thresholds
    b. Strong encryption
    c. Firewalls
    d. IDSs
    Answer: a. Lockout thresholdssentinelone+1​
26. One effective monitoring method for detection is:
    a. Audit login failures
    b. Random password resets
    c. Network speed checks
    d. Browser logs
    Answer: a. Audit login failuressentinelone​
27. Password spraying can lead to what secondary attack?
    a. Ransomware deployment
    b. SQL injection
    c. DDoS flood
    d. DNS poisoning
    Answer: a. Ransomware deploymentproton+1​
28. Locking accounts after multiple failures helps prevent:
    a. Password spraying
    b. DoS
    c. ARP spoofing
    d. Zero-day exploits
    Answer: a. Password sprayingsentinelone​
29. Password spraying is also called:
    a. Spray attack
    b. Replay attack
    c. Side-channel attack
    d. Format attack
    Answer: a. Spray attackpaloaltonetworks​
30. In modern environments, password spraying often targets:
    a. Cloud authentication
    b. On-premises databases
    c. ICS devices
    d. Backup systems
    Answer: a. Cloud authenticationlearn.microsoft+1​
31. IP whitelisting helps mitigate spraying by:
    a. Restricting access to trusted sources
    b. Encrypting network layers
    c. Blocking DNS
    d. Obfuscating passwords
    Answer: a. Restricting access to trusted sourcessentinelone​
32. Password spraying doesn’t depend on which factor?
    a. Previously breached credentials
    b. Common password sets
    c. OSINT username collection
    d. Automated login tools
    Answer: a. Previously breached credentialspaloaltonetworks​
33. MFA’s main contribution is preventing:
    a. Account takeover
    b. DNS hijacking
    c. DoS
    d. SQL injection
    Answer: a. Account takeoverspecopssoft+1​
34. Spray attacks exploit weaknesses in:
    a. Credential hygiene
    b. Encryption algorithm
    c. Firewalls
    d. VPN routing
    Answer: a. Credential hygienepaloaltonetworks​
35. Password spraying is effective due to:
    a. Weak passwords
    b. Complex encryption
    c. Firewalls
    d. VPN tunneling
    Answer: a. Weak passwordssentinelone+1​
36. Attackers may sequence attempts with time delays to avoid:
    a. Lockout thresholds
    b. MFA prompts
    c. Encryption
    d. IDS alerts
    Answer: a. Lockout thresholdsopengenus+1​
37. Automated tools used may handle:
    a. Login sessions
    b. File transfers
    c. Key encryption
    d. Packet capture
    Answer: a. Login sessionsproton​
38. The attacker benefits most when the target organization has:
    a. Poor password policies
    b. Strong firewalls
    c. End-to-end encryption
    d. Regular audits
    Answer: a. Poor password policiessentinelone+1​
39. Regular password rotation helps prevent:
    a. Reuse in spraying attacks
    b. SQL breaches
    c. Firewall bypass
    d. DNS leaks
    Answer: a. Reuse in spraying attacksspecopssoft+1​
40. Password spraying often begins after:
    a. Gathering public employee data
    b. Encrypting network files
    c. Deploying phishing links
    d. Bypassing firewalls
    Answer: a. Gathering public employee dataproton+1​
41. Attack traffic during spraying often appears as:
    a. Legitimate login activity
    b. Malformed packets
    c. File transfer attempts
    d. DDoS floods
    Answer: a. Legitimate login activitypaloaltonetworks​
42. Session token theft is sometimes combined with:
    a. Password spraying
    b. SQL injection
    c. Data encryption
    d. Worm propagation
    Answer: a. Password sprayingpaloaltonetworks​
43. Which organization type is most targeted by spraying?
    a. Enterprises with cloud SSO
    b. Small local ISPs
    c. Gaming networks
    d. Industrial OT systems
    Answer: a. Enterprises with cloud SSOpaloaltonetworks​
44. Logs showing repeated failed attempts using “Password123” may suggest:
    a. Password spraying
    b. Spam attacks
    c. Cross-site scripting
    d. DNS tunneling
    Answer: a. Password sprayingsentinelone+1​
45. Spraying tools test passwords across how many user accounts per round?
    a. Many
    b. One only
    c. Random
    d. None
    Answer: a. Manycrowdstrike+1​
46. Detection can be improved through:
    a. Account anomaly alerts
    b. Port scanning
    c. Random email checks
    d. MAC address control
    Answer: a. Account anomaly alertssentinelone​
47. Password spraying differs from keylogging since it:
    a. Guesses passwords rather than records them
    b. Uses hardware
    c. Captures keystrokes
    d. Steals cookies
    Answer: a. Guesses passwords rather than records themproton+1​
48. Once access is gained, attackers may:
    a. Spread malware
    b. Patch vulnerabilities
    c. Reset all passwords
    d. Configure MFA
    Answer: a. Spread malwareproton​
49. MFA fatigue makes spraying more effective when users:
    a. Accept repeated false prompts
    b. Change passwords quickly
    c. Lock devices
    d. Use password managers
    Answer: a. Accept repeated false promptspaloaltonetworks​
50. Organizations should focus password spraying prevention on:
    a. Identity layer protections
    b. Physical firewalls
    c. Network segmentation
    d. Device encryption
    Answer: a. Identity layer protectionssentinelone+1​

1. https://www.crowdstrike.com/en-us/cybersecurity-101/cyberattacks/password-spraying/
2. https://www.paloaltonetworks.com/cyberpedia/password-spraying
3. https://proton.me/blog/password-spraying-attack
4. https://www.sentinelone.com/cybersecurity-101/cybersecurity/what-is-password-spraying/
5. https://specopssoft.com/blog/password-spraying-attack-guide-and-prevention-tips/
6. https://iq.opengenus.org/password-spraying-attack/
7. https://owasp.org/www-community/attacks/Password_Spraying_Attack
8. https://learn.microsoft.com/en-us/security/operations/incident-response-playbook-password-spray
9. https://wayground.com/admin/quiz/64de792715d40e00085de19c/cyberorg-113-password-attacks-quiz
10. https://www.scribd.com/document/929169379/CyberSecurity-MCQs
11. https://www.vinsys.com/blog/top-30-mcqs-ceh-exam-preparation
12. https://iq.opengenus.org/heap-spraying-attack/
13. https://www.varonis.com/blog/password-spraying
14. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
15. https://www.kaspersky.com/resource-center/definitions/what-is-password-spraying
16. https://www.splunk.com/en_us/blog/learn/password-spraying.html
17. https://www.igmguru.com/blog/cyber-security-mcqs
18. https://www.semperis.com/blog/password-spraying-detection-in-active-directory/
19. https://aws.amazon.com/blogs/business-productivity/combat-password-spraying-with-aws-appfabric/
20. https://us.norton.com/blog/emerging-threats/password-spraying