220-1102 · Question #30
The network was breached over the weekend. System logs indicate that a single user's account was successfully breached after 500 attempts with a dictionary attack. Which of the following would BEST…
The correct answer is B. Account lockout. To best mitigate a dictionary attack that successfully breached a user's account after numerous attempts, implementing account lockout is crucial.
Question
The network was breached over the weekend. System logs indicate that a single user's account was successfully breached after 500 attempts with a dictionary attack. Which of the following would BEST mitigate this threat?
Options
- AEncryption at rest
- BAccount lockout
- CAutomatic screen lock
- DAntivirus
How the community answered
(26 responses)- A4% (1)
- B85% (22)
- C8% (2)
- D4% (1)
Why each option
To best mitigate a dictionary attack that successfully breached a user's account after numerous attempts, implementing account lockout is crucial.
Encryption at rest protects data stored on a device but does not prevent an account from being breached via a dictionary attack against a login prompt.
Automatic screen lock secures a device when idle but does not protect against a dictionary attack on an active login session or service.
Antivirus software primarily detects and removes malware, which is unrelated to mitigating a dictionary attack against user credentials.
Concept tested: Mitigating dictionary and brute-force attacks
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/account-lockout-threshold
Topics
Community Discussion
No community discussion yet for this question.