Password Cracking Countermeasures EHE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company is implementing a new remote-access VPN. The security team wants to ensure that a stolen password alone cannot grant access. Which control is specifically designed for this?

   • ARequire a one-time code from an authenticator app in addition to the password.
   • BEnforce a 16-character password with no other changes.
   • CSet the VPN session timeout to 5 minutes.
   • DUse a password manager to store the VPN password.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An online service has been experiencing distributed brute-force attacks from many different IP addresses. The current policy locks an account after 10 failed attempts, but attackers are rotating IPs and targeting many accounts. Which additional control would be most effective?

   • AIncrease the lockout threshold to 20 failed attempts to avoid locking out legitimate users.
   • BImplement rate limiting on the login endpoint per account and per IP, and alert on multiple failed attempts across different accounts.
   • CDisable account lockout and rely on CAPTCHA after every login attempt.
   • DRequire all users to change their passwords immediately.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Why is user education important in mitigating password cracking attacks?

   • AIt ensures that users can crack passwords faster if needed
   • BIt allows users to bypass MFA when they forget their password
   • CIt helps users recognize phishing attempts and avoid using weak or reused passwords
   • DIt teaches users to share passwords securely with colleagues
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a key benefit of using a password manager?

   • AIt stores passwords in plain text for easy access
   • BIt allows users to use the same password for multiple accounts
   • CIt generates and stores unique, complex passwords for each account
   • DIt eliminates the need for multi-factor authentication
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security team wants to detect password cracking attempts against their Active Directory environment. Which logging and monitoring practice is most effective?

   • AUse a SIEM to collect logs but only review them quarterly.
   • BMonitor only successful logons and ignore failed attempts.
   • CEnable auditing for account logon events and configure alerts for multiple failed logons followed by a successful logon.
   • DCollect logs from the domain controller but do not set up alerts.
   Reveal Solution Discussion Select an answer first