What is the primary purpose of an account lockout mechanism?

To prevent brute-force attacks by disabling the account after repeated failed attempts

To allow unlimited login attempts without interruption

To automatically change the user's password after a failed attempt

To notify the user of a failed attempt via email

A security analyst notices a large number of failed login attempts for a single user account over a short period, followed by a successful login from an unusual geographic location. What should the analyst do first?

Change the user's password without checking logs.

Ignore the failed attempts and focus on the successful login.

Disable the user account immediately without further investigation.

Review the authentication logs to confirm the pattern and then investigate the successful login.

A company is implementing a new password policy. The security team wants to ensure that passwords are not easily guessed and that users do not reuse old passwords. Which policy settings should be implemented?

Password expiration every 90 days and history of 3

Maximum password age of 30 days and no password history

Minimum password length of 12 characters and password history of 10

Password complexity requiring special characters but no minimum length

A network administrator needs to securely transfer files between two Linux servers over an untrusted network. Which protocol should the administrator use?

Trivial File Transfer Protocol (TFTP)

Hypertext Transfer Protocol (HTTP)

SSH File Transfer Protocol (SFTP)

A company requires employees to use a one-time code from a mobile authenticator app in addition to their password when logging into the corporate VPN. This is an example of which security control?

Multi-factor authentication (MFA)

Role-based access control (RBAC)

CertNexusCyberSec First Responder (CFR)

Domain 3Objective 2

Objective 3.2 Protect Access. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 5)

Part of the 3.0 Address the Security Concerns of Computing Environments domain, which accounts for 28% of the CYBERSEC-FIRST-RESPONDER exam.

26questions here

6free pages

8concepts

28%of the exam

Questions 21–25

21foundation · easy
What is the primary purpose of an account lockout mechanism?
Select an answer first
22application · medium
A security analyst notices a large number of failed login attempts for a single user account over a short period, followed by a successful login from an unusual geographic location. What should the analyst do first?
Select an answer first
23application · medium
A company is implementing a new password policy. The security team wants to ensure that passwords are not easily guessed and that users do not reuse old passwords. Which policy settings should be implemented?
Select an answer first
24application · easy
A network administrator needs to securely transfer files between two Linux servers over an untrusted network. Which protocol should the administrator use?
Select an answer first
25application · easy
A company requires employees to use a one-time code from a mobile authenticator app in addition to their password when logging into the corporate VPN. This is an example of which security control?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSEC-FIRST-RESPONDER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CYBERSEC-FIRST-RESPONDER” is a trademark of its owner, used for identification only.