MENU
A security setting to lock a profile after a certain number of unsuccessful login attempts would be MOST effective against which type of attack?
Suggested Answer: B
Get Premium Cybersecurity-Audit-Certificate Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
When employees use personal mobile devices to access a VPN, the greatest concern for an IS auditor is the potential for sensitive data to be stored in an unsecured manner. If data is stored in plain text, it could be easily accessed by unauthorized parties if the device is lost, stolen, or compromised. This risk is heightened when the devices are not managed by the organization's IT department, which would typically enforce security policies such as encryption.
36 comments · newest first
SY
Sylvia
10 months ago
Really? I’m not sure that’s enough to stop a determined attacker.
VA
Val
11 months ago
No way, I think it could help with backdoors too!
DY
Dylan
11 months ago
Wait, isn't it also useful against other attacks?
OR
Ora
11 months ago
Agreed, locking after failed attempts is smart.
TE
Teddy
11 months ago
Definitely A, brute force attacks are all about guessing!
VA
Vanda
12 months ago
Hmm, I’m a bit confused. Could it also help against man-in-the-middle attacks? I thought those were more about intercepting data rather than guessing passwords.
LO
Loreen
12 months ago
I feel like this question is similar to one we practiced in class about account lockout policies. I think it was definitely about brute force attacks.
AL
Alise
12 months ago
I'm not entirely sure, but I remember something about buffer overflow attacks being more about exploiting vulnerabilities in software rather than login attempts.
TI
Tiera
1 year ago
I think locking a profile after failed attempts is mainly to prevent brute force attacks, right? It makes sense since those rely on guessing passwords repeatedly.
GR
Graham
1 year ago
I think the key here is understanding the different types of attacks and how this security measure would impact them. A brute force attack is definitely the most obvious one, since locking an account after failed attempts would stop the attacker from trying endless passwords. The other options seem less directly related, so I'm leaning towards A as the best answer.
RU
Rusty
1 year ago
Okay, let's see. A brute force attack is when someone tries a bunch of different passwords to break into an account, so that makes sense. But what about the other options - buffer overflow, backdoor, and man-in-the-middle? I'm a little fuzzy on how those attacks work and which one this security measure would be most effective against.
CE
Celia
1 year ago
Hmm, I'm not entirely sure about this one. I know that brute force attacks involve trying lots of different passwords, but I'm not confident that's the only type of attack this security measure would be effective against. I'll have to think it through carefully.
FL
Fletcher
1 year ago
This seems like a straightforward security question. I think the answer is A - Brute force, since locking an account after failed login attempts would be an effective way to prevent attackers from trying multiple passwords to gain access.
FR
France
1 year ago
I'm pretty sure the Network Trap tool is used to isolate and contain viruses, so I'll go with option C.
BE
Beckie
1 year ago
Hmm, I'm a bit confused by the question. Do I need to do any calculations or just look at the availability percentages directly?
NO
Noah
1 year ago
Brute force, huh? Sounds like a job for the 'Hulk Smash' method of security. I'm just imagining a big green guy angrily locking down profiles left and right. 'Puny hacker, you no get in!'
MI
Mindy
1 year ago
Backdoor? Really? That's more about hidden access points, not login security. Brute force is the way to go here, folks. Unless the answer is 'all of the above' and the real solution is to just turn off the computer. *wink wink*
AR
Aron
1 year ago
C: Backdoor is more about hidden access points, not login security
LO
Loise
1 year ago
B: I agree, brute force is the most effective against multiple login attempts
AR
Arthur
1 year ago
A: Brute force
FR
Francine
1 year ago
Wait, is this a trick question? I thought Man-in-the-middle would be the right answer, but I guess that's more about intercepting communication rather than login attempts. Brute force it is!
DO
Dona
1 year ago
It's not a trick question, Brute force is the most effective attack that can be prevented with this security setting.
CH
Chaya
1 year ago
Yeah, locking the profile after unsuccessful attempts would definitely help against that.
SH
Sherill
1 year ago
I think Brute force is the right answer.
JU
Julieta
1 year ago
I was thinking Buffer overflow, but that's more about exploiting software vulnerabilities. Locking the profile is a security measure, so it makes sense for Brute force attacks.
MU
Muriel
1 year ago
C: Agreed, it's a good way to prevent someone from guessing passwords over and over.
OR
Oretha
1 year ago
B: Yeah, locking the profile after failed attempts would definitely help against that.
KA
Karma
1 year ago
A: I think it's Brute force.
HO
Honey
1 year ago
Brute force, definitely! Locking the profile after failed attempts is a great way to stop those pesky hackers from guessing their way in.
NI
Nicolette
1 year ago
Actually, locking the profile after failed attempts is more effective against brute force attacks, not backdoor attacks.
DE
Denise
1 year ago
C) Backdoor
VI
Virgie
1 year ago
I agree, brute force attacks can be prevented by locking the profile after multiple failed login attempts.
JA
Janessa
1 year ago
A) Brute force
HE
Herminia
2 years ago
I'm not sure, but I think locking a profile after unsuccessful login attempts would definitely help prevent brute force attacks.
AM
Amber
2 years ago
I agree with Fidelia. Brute force attacks rely on trying multiple passwords until the correct one is found.
FI
Fidelia
2 years ago
I think the answer is A) Brute force.