220-802 · Question #638
On a mobile device, enforcing a policy that erases a device after a number of failed login attempts is used to prevent which of the following?
The correct answer is B. Brute forcing. Erasing a device after repeated failed login attempts directly counters brute force attacks, which rely on trying many password combinations until one succeeds.
Question
On a mobile device, enforcing a policy that erases a device after a number of failed login attempts is used to prevent which of the following?
Options
- AUnauthorized application installations
- BBrute forcing
- CSocial engineering
- DMan-in-the-middle attack
How the community answered
(30 responses)- A3% (1)
- B93% (28)
- C3% (1)
Why each option
Erasing a device after repeated failed login attempts directly counters brute force attacks, which rely on trying many password combinations until one succeeds.
Unauthorized application installations are prevented through application whitelisting or app store restrictions, not by limiting login attempts.
Brute force attacks against mobile devices involve systematically attempting many PIN or password combinations to gain unauthorized access. A policy that wipes the device after a set number of failed attempts (typically 10) makes this attack infeasible by destroying the data before enough guesses can be made.
Social engineering targets human behavior and deception rather than automated login attempts, so a lockout policy does not address it.
A man-in-the-middle attack intercepts network communications in transit and is not mitigated by device login attempt limits.
Concept tested: Mobile device brute force protection via lockout policy
Source: https://learn.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started
Topics
Community Discussion
No community discussion yet for this question.