You can use spam protection layers including Akismit with Concrete CMS. If you have multiple libraries installed, this is the interface you choose which one to actively use. You can also assign a Spam Whitelist Group whose input won't be checked against the spam control measures.