Question

A company tasks a security analyst with mitigating the risk of a brute force attack that exploits weak passwords on systems.

Which concepts would be most effective in defending against this attack methodology? (Select two.)

answer

Registry configuration


Network segmentation


System hardening


User awareness training


Multi-factor authentication

Answer 1

System hardening and Multi-factor authentication.

- System hardening: allows enforcing strong password policies, account lockout, and removing/default-account protections that reduce brute-force success.
- Multi-factor authentication: prevents attackers from using a stolen/guessed password alone to gain access.