Account lockout is a mitigation strategy used by Jane, the administrator, to combat which of the following attacks? (Select TWO).

Spoofing involves impersonating a trusted identity at the network or application layer and is not countered by limiting the number of failed login attempts.

Man-in-the-middle attacks intercept communications between two parties and are not dependent on failed authentication attempts that would trigger a lockout.

Dictionary attacks systematically attempt passwords from a wordlist, and account lockout stops the attack after the configured failed-attempt threshold is reached, preventing exhaustive guessing.

Brute force attacks try every possible password combination, and account lockout limits the number of attempts an attacker can make before the account is locked, rendering the attack infeasible.

Privilege escalation occurs after authentication has already succeeded and involves exploiting flaws to gain higher permissions, which account lockout does not address.