Secure Deployment and Maintenance CASEJAVA Practice Questions (Page 8)

Questions 36–36

1. 36expert · hard

   A security operations team is configuring monitoring for a Java application. The application is known to be targeted by brute-force attacks on its login endpoint. The team wants to detect these attacks early and automatically block the offending IP addresses. The application runs on a single server behind a load balancer. Which approach provides the most effective detection and response?

   • AConfigure the load balancer to block any IP that makes more than 10 requests per second to the login endpoint
   • BMonitor the server's network traffic and block any IP that sends more than 100 packets per second
   • CEnable the application's built-in account lockout feature to lock accounts after 3 failed attempts
   • DConfigure the application to log failed login attempts with the source IP, and use a log analysis tool to trigger a firewall rule to block the IP after 5 failures
   Reveal Solution Discussion Select an answer first