nerdexam
GIAC

GPEN · Question #352

You work as a Network Administrator in the SecureTech Inc. The SecureTech Inc. is using Linuxbased server. Recently, you have updated the password policy of the company in which the server will…

The correct answer is C. Brute force. Enforcing an account lockout after a fixed number of failed login attempts is a direct countermeasure against brute force attacks, which rely on exhaustively trying many password combinations.

Exploitation & Post-Exploitation Techniques

Question

You work as a Network Administrator in the SecureTech Inc. The SecureTech Inc. is using Linuxbased server. Recently, you have updated the password policy of the company in which the server will disable passwords after four trials. What type of attack do you want to stop by enabling this policy?

Options

  • ACookie poisoning
  • BXSS
  • CBrute force
  • DReplay

How the community answered

(39 responses)
  • A
    10% (4)
  • B
    5% (2)
  • C
    82% (32)
  • D
    3% (1)

Why each option

Enforcing an account lockout after a fixed number of failed login attempts is a direct countermeasure against brute force attacks, which rely on exhaustively trying many password combinations.

ACookie poisoning

Cookie poisoning involves manipulating web application cookies to alter session data or escalate privileges, and is not related to repeated failed login attempts.

BXSS

Cross-site scripting (XSS) injects malicious scripts into web pages viewed by other users and has no connection to password-guessing or login attempt limits.

CBrute forceCorrect

A brute force attack works by systematically attempting large numbers of password guesses; an account lockout policy after four failed trials cuts off this attack vector by making exhaustive guessing infeasible before the account is disabled.

DReplay

A replay attack captures and retransmits valid authentication tokens or packets to gain unauthorized access, and does not involve guessing passwords through repeated login trials.

Concept tested: Account lockout policy as brute force attack mitigation

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/account-lockout-policy

Topics

#brute force attack#account lockout#password policy#authentication hardening

Community Discussion

No community discussion yet for this question.

Full GPEN Practice