Câu 63: GCIH: GIAC Certified Incident Handler

A spike in Event ID 4625 is found in Windows event logs. Looking at individual accounts across the domain, no more than 5 failed logins are found for any single account. What is a likely explanation for this?

1. A. The organization's passwords have been exposed online
2. B. There was a password spraying attack on the organization — đáp án hiện tại
3. C. There was a pass-the-hash attack on the organization
4. D. The organization experienced an attempted Kerberoasting attack