SK0-004 · Question #650
A server prompts Ann, a user, to reset her logon password. The next time Ann tries to log onto the server, she cannot remember her new password. After several failed attempts, Ann receives a message…
The correct answer is A. Reset Ann's password B. Unlock Ann's account. When a user is locked out after too many failed login attempts and has forgotten their password, the administrator must both unlock the account and reset the password to restore access.
Question
A server prompts Ann, a user, to reset her logon password. The next time Ann tries to log onto the server, she cannot remember her new password. After several failed attempts, Ann receives a message that she cannot attempt to log on again without the help of an administrator. Which of the following should an administrator do to remedy this issue? (Choose two.)
Options
- AReset Ann's password
- BUnlock Ann's account
- CReboot the server
- DRecreate Ann's profile
- ECheck Ann's profile
- FVerify Ann's ACL
How the community answered
(48 responses)- A88% (42)
- C6% (3)
- D2% (1)
- E4% (2)
Why each option
When a user is locked out after too many failed login attempts and has forgotten their password, the administrator must both unlock the account and reset the password to restore access.
Because Ann forgot her new password, the administrator must reset it to a known temporary value so she can authenticate; without a password reset, Ann cannot log in even after the lockout is cleared.
Multiple failed login attempts trigger the account lockout policy, which sets a flag that blocks further authentication attempts; the administrator must explicitly unlock the account in the directory service to allow logon again.
Rebooting the server does not clear account lockout flags or change stored credentials - those are persisted in the directory service and survive restarts.
Recreating Ann's profile addresses profile corruption or data issues and has no effect on authentication failures caused by a forgotten password and account lockout.
Checking Ann's profile examines profile settings or stored data, which is unrelated to resolving an authentication failure caused by a lockout and forgotten password.
Verifying Ann's ACL relates to her permissions on specific resources, not to the account lockout or credential reset required to restore her ability to log on.
Concept tested: Account lockout policy and password reset in directory services
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/account-lockout-policy
Topics
Community Discussion
No community discussion yet for this question.