nerdexam
CompTIA

SK0-004 · Question #650

A server prompts Ann, a user, to reset her logon password. The next time Ann tries to log onto the server, she cannot remember her new password. After several failed attempts, Ann receives a message…

The correct answer is A. Reset Ann's password B. Unlock Ann's account. When a user is locked out after too many failed login attempts and has forgotten their password, the administrator must both unlock the account and reset the password to restore access.

Server administration

Question

A server prompts Ann, a user, to reset her logon password. The next time Ann tries to log onto the server, she cannot remember her new password. After several failed attempts, Ann receives a message that she cannot attempt to log on again without the help of an administrator. Which of the following should an administrator do to remedy this issue? (Choose two.)

Options

  • AReset Ann's password
  • BUnlock Ann's account
  • CReboot the server
  • DRecreate Ann's profile
  • ECheck Ann's profile
  • FVerify Ann's ACL

How the community answered

(48 responses)
  • A
    88% (42)
  • C
    6% (3)
  • D
    2% (1)
  • E
    4% (2)

Why each option

When a user is locked out after too many failed login attempts and has forgotten their password, the administrator must both unlock the account and reset the password to restore access.

AReset Ann's passwordCorrect

Because Ann forgot her new password, the administrator must reset it to a known temporary value so she can authenticate; without a password reset, Ann cannot log in even after the lockout is cleared.

BUnlock Ann's accountCorrect

Multiple failed login attempts trigger the account lockout policy, which sets a flag that blocks further authentication attempts; the administrator must explicitly unlock the account in the directory service to allow logon again.

CReboot the server

Rebooting the server does not clear account lockout flags or change stored credentials - those are persisted in the directory service and survive restarts.

DRecreate Ann's profile

Recreating Ann's profile addresses profile corruption or data issues and has no effect on authentication failures caused by a forgotten password and account lockout.

ECheck Ann's profile

Checking Ann's profile examines profile settings or stored data, which is unrelated to resolving an authentication failure caused by a lockout and forgotten password.

FVerify Ann's ACL

Verifying Ann's ACL relates to her permissions on specific resources, not to the account lockout or credential reset required to restore her ability to log on.

Concept tested: Account lockout policy and password reset in directory services

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/account-lockout-policy

Topics

#account lockout#password reset#user account management#authentication

Community Discussion

No community discussion yet for this question.

Full SK0-004 Practice