Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

What should you be concerned about when notified of multiple authentication attempts with different passwords?

1. Suspected brute force attack

2. Suspected identity theft (pass-the-hash)

3. Network congestion

4. Normal user behavior

The correct answer is: Suspected brute force attack

Being notified of multiple authentication attempts with different passwords typically indicates a possible brute force attack. In this scenario, an attacker is trying to gain unauthorized access to an account by systematically guessing passwords. This situation is concerning because it reflects a deliberate effort by an unauthorized entity to access systems or data, often through an automated process that can try numerous combinations quickly. Concerns arise primarily from the potential for data breaches and compromised user accounts if such attacks are successful. Identifying and mitigating these attempts is crucial to maintaining security. The concept of suspected identity theft, while relevant, is less directly associated with multiple failed attempts using different passwords than brute force activity. Normal user behavior wouldn't typically involve a high frequency of login attempts with different passwords, nor does network congestion relate to this concern. It is essential to address any abnormal access behavior to protect sensitive information and uphold security protocols.