nerdexam
CompTIA

CAS-005 · Question #142

An organization recently implemented a policy that requires all passwords to be rotated every 90 days. An administrator sees a large volume of failed sign-on logs from multiple servers that are…

The correct answer is C. Automate logout of inactive sessions. Users disconnecting from RDP sessions without logging off can leave sessions open, which can lead to account lockouts due to failed password attempts when password rotation occurs. Automating the logout of inactive sessions ensures that users are properly logged off, reducing…

Submitted by chen.hong· Mar 6, 2026Security Operations

Question

An organization recently implemented a policy that requires all passwords to be rotated every 90 days. An administrator sees a large volume of failed sign-on logs from multiple servers that are often accessed by users. The administrator determines users are disconnecting from the RDP session but not logging off. Which of the following should the administrator do to prevent account lockouts?

Options

  • AIncrease the account lockout threshold.
  • BEnforce password complexity.
  • CAutomate logout of inactive sessions
  • DExtend the allowed session length.

How the community answered

(39 responses)
  • A
    10% (4)
  • B
    5% (2)
  • C
    79% (31)
  • D
    5% (2)

Explanation

Users disconnecting from RDP sessions without logging off can leave sessions open, which can lead to account lockouts due to failed password attempts when password rotation occurs. Automating the logout of inactive sessions ensures that users are properly logged off, reducing the chances of session-related issues and account lockouts.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice