SY0-301 · Question #427
A security administrator must implement all requirements in the following corporate policy: Passwords shall be protected against offline password brute force attacks. Passwords shall be protected…
The correct answer is A. Account lockout D. Password complexity F. Minimum password length. Account lockout stops online brute force, while password complexity and minimum length together increase the keyspace to resist offline brute force attacks.
Question
A security administrator must implement all requirements in the following corporate policy:
Passwords shall be protected against offline password brute force attacks. Passwords shall be protected against online password brute force attacks. Which of the following technical controls must be implemented to enforce the corporate policy? (Select THREE).
Options
- AAccount lockout
- BAccount expiration
- CScreen locks
- DPassword complexity
- EMinimum password lifetime
- FMinimum password length
How the community answered
(21 responses)- A76% (16)
- B14% (3)
- C5% (1)
- E5% (1)
Why each option
Account lockout stops online brute force, while password complexity and minimum length together increase the keyspace to resist offline brute force attacks.
Account expiration limits how long an account remains active and is used for lifecycle management, not for defending against brute force password attacks.
Screen locks protect unattended workstations from physical access and are unrelated to network-based or offline password brute force attacks.
Minimum password lifetime prevents users from cycling through passwords to reuse old ones, which addresses password history policy but does not protect against brute force attacks.
Concept tested: Password policy controls against brute force attacks
Source: https://pages.nist.gov/800-63-3/sp800-63b.html
Topics
Community Discussion
No community discussion yet for this question.