GPEN · Question #352
You work as a Network Administrator in the SecureTech Inc. The SecureTech Inc. is using Linuxbased server. Recently, you have updated the password policy of the company in which the server will…
The correct answer is C. Brute force. Enforcing an account lockout after a fixed number of failed login attempts is a direct countermeasure against brute force attacks, which rely on exhaustively trying many password combinations.
Question
You work as a Network Administrator in the SecureTech Inc. The SecureTech Inc. is using Linuxbased server. Recently, you have updated the password policy of the company in which the server will disable passwords after four trials. What type of attack do you want to stop by enabling this policy?
Options
- ACookie poisoning
- BXSS
- CBrute force
- DReplay
How the community answered
(39 responses)- A10% (4)
- B5% (2)
- C82% (32)
- D3% (1)
Why each option
Enforcing an account lockout after a fixed number of failed login attempts is a direct countermeasure against brute force attacks, which rely on exhaustively trying many password combinations.
Cookie poisoning involves manipulating web application cookies to alter session data or escalate privileges, and is not related to repeated failed login attempts.
Cross-site scripting (XSS) injects malicious scripts into web pages viewed by other users and has no connection to password-guessing or login attempt limits.
A brute force attack works by systematically attempting large numbers of password guesses; an account lockout policy after four failed trials cuts off this attack vector by making exhaustive guessing infeasible before the account is disabled.
A replay attack captures and retransmits valid authentication tokens or packets to gain unauthorized access, and does not involve guessing passwords through repeated login trials.
Concept tested: Account lockout policy as brute force attack mitigation
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/account-lockout-policy
Topics
Community Discussion
No community discussion yet for this question.