A security analyst is reviewing authentication logs and notices that a user account has had 10 failed login attempts in the last 5 minutes, followed by a successful login. What should the analyst do?

Ignore the failed attempts because the user eventually logged in successfully.

Change the user's password immediately.

Disable the user account without further investigation.

Investigate the successful login to determine if it was legitimate.

CertNexusCyberSec First Responder (CFR)

Domain 3Objective 2

Objective 3.2 Protect Access. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 6)

Part of the 3.0 Address the Security Concerns of Computing Environments domain, which accounts for 28% of the CYBERSEC-FIRST-RESPONDER exam.

26questions here

6free pages

8concepts

28%of the exam

Questions 26–26

26application · medium
A security analyst is reviewing authentication logs and notices that a user account has had 10 failed login attempts in the last 5 minutes, followed by a successful login. What should the analyst do?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CYBERSEC-FIRST-RESPONDER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CYBERSEC-FIRST-RESPONDER” is a trademark of its owner, used for identification only.

Objective 3.2 Protect Access. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 6)

Questions 26–26

A security analyst is reviewing authentication logs and notices that a user account has had 10 failed login attempts in the last 5 minutes, followed by a successful login. What should the analyst do?

Keep studying — 3.0 Address the Security Concerns of Computing Environments