An IT administrator is implementing security controls on an OS. Which of the following will provide the best protection against a brute-force attack? (Select two).

The correct answer is A. Implementing MFA D. Limiting failed log-in requests. Implementing MFA (multi-factor authentication) and limiting failed log-in requests are two effective ways to prevent brute-force attacks on an OS. MFA requires users to provide more than one piece of evidence to prove their identity, such as a password and a code sent to their…

Security

Question

Options

AImplementing MFA
BEnforcing strong passwords
CConfiguring user passwords to change every 30 days
DLimiting failed log-in requests
EUsing API keys
FImplementing SSH keys

How the community answered

(14 responses)

A
71% (10)
B
7% (1)
C
7% (1)
E
14% (2)

Explanation

Implementing MFA (multi-factor authentication) and limiting failed log-in requests are two effective ways to prevent brute-force attacks on an OS. MFA requires users to provide more than one piece of evidence to prove their identity, such as a password and a code sent to their phone. This makes it harder for attackers to guess the correct credentials. Limiting failed log-in requests prevents attackers from trying too many password combinations in a short time, by locking out the account or the IP address after a certain number of attempts. This slows down the attack and alerts the administrator of a possible intrusion.

Topics

#MFA#brute-force protection#account lockout#authentication

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice