Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

If you receive alerts about multiple failed authentication attempts with a list of usernames, what is this indicating?

1. Account enumeration reconnaissance

2. Network intrusion

3. Suspicious login activity

4. User behavior anomalies

The correct answer is: Account enumeration reconnaissance

Receiving alerts about multiple failed authentication attempts with a list of usernames indicates account enumeration reconnaissance. This type of attack involves an attacker trying to determine valid usernames by attempting to log in with different credentials and noting which attempts fail or succeed. When multiple failed attempts occur alongside a list of usernames, it suggests that the attacker is systematically verifying which accounts are active and which are not. In this scenario, the focus on failed login attempts specifically highlights the intent of probing or gathering information about accounts within a system without successfully logging in. Recognizing this pattern is crucial as it often precedes further attacks, potentially leading to more serious security breaches if preventative measures aren't taken. Hence, understanding that these alerts represent reconnaissance activities provides essential context for responding to potential security threats.