A workstation needs to be hardened against brute force attacks. It also needs to be protected if a user walks away and leaves the computer unlocked. Which of the following would harden the…

Question

Options

• ASet up a failed attempts lockout setting.
• BEnable a screen saver password.
• CUse a stronger Active Directory password.
• DDisable local logon time restrictions.
• ECreate a BIOS password
• FEnforce a password reset policy.

• A
  75% (30)
• C
  8% (3)
• D
  3% (1)
• E
  13% (5)
• F
  3% (1)

Explanation

A failed attempts lockout setting (account lockout policy) directly counters brute force attacks by locking the account after a defined number of incorrect password entries, making automated password guessing infeasible. Enabling a screen saver password (screen lock after inactivity) protects against physical access to an unattended workstation - if a user walks away, the session locks automatically after a timeout period. A stronger Active Directory password improves general password security but does not limit brute force attempts on its own. Disabling logon time restrictions would actually reduce security. A BIOS password protects against unauthorized hardware-level access, not logon brute force. A password reset policy improves password hygiene but does not address either specific threat scenario described.

No community discussion yet for this question.