nerdexam
CompTIACompTIA

CS0-003 · Question #466

CS0-003 Question #466: Real Exam Question with Answer & Explanation

Sign in or unlock CS0-003 to reveal the answer and full explanation for question #466. The question stem and answer options stay visible for context.

Submitted by fatema_kw· Mar 6, 2026Incident Response and Management

Question

In the last hour, a high volume of failed RDP authentication attempts has been logged on a critical server. All of the authentication attempts originated from the same remote IP address and made use of a single valid domain user account. Which of the following mitigating controls would be most effective to reduce the rate of success of this brute-force attack? (Choose two.)

Options

  • AIncrease the granularity of log-on event auditing on all devices.
  • BEnable host firewall rules to block all outbound traffic to TCP port 3389.
  • CConfigure user account lockout after a limited number of failed attempts.
  • DImplement a firewall block for the IP address of the remote system.
  • EInstall a third-party remote access tool and disable RDP on all devices.
  • FBlock inbound to TCP port 3389 from untrusted remote IP addresses at the perimeter firewall.

Unlock CS0-003 to see the answer

You've previewed enough free CS0-003 questions. Unlock CS0-003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#brute-force attack#RDP security#account lockout#firewall rules#incident response
Full CS0-003 PracticeBrowse All CS0-003 Questions