SSCP · Question #169
Which of the following is not a preventive login control?
The correct answer is A. Last login message. A 'last login message' displays information about the user's previous successful (and sometimes failed) login attempts. This is a detective control - it informs the user of potentially suspicious activity after the fact, allowing them to detect unauthorized access. It does not…
Question
Which of the following is not a preventive login control?
Options
- ALast login message
- BPassword aging
- CMinimum password length
- DAccount expiration
How the community answered
(21 responses)- A95% (20)
- B5% (1)
Explanation
A 'last login message' displays information about the user's previous successful (and sometimes failed) login attempts. This is a detective control - it informs the user of potentially suspicious activity after the fact, allowing them to detect unauthorized access. It does not prevent an attacker from logging in. By contrast, password aging (B) forces regular password changes to reduce exposure, minimum password length (C) prevents weak passwords from being set, and account expiration (D) disables credentials after a set period - all of these actively block or restrict unauthorized access before or during the login attempt, making them preventive controls.
Topics
Community Discussion
No community discussion yet for this question.