Question

A company tasks a security analyst with mitigating the risk of a brute force attack that exploits weak passwords on systems.

Which concepts would be most effective in defending against this attack methodology? (Select two.)

answer

System hardening


Multi-factor authentication


Registry configuration


User awareness training


Network segmentation

Answer 1

Multi-factor authentication
User awareness training

Reason: MFA prevents account takeover even if a password is guessed, and user training reduces the likelihood of weak/reused passwords that brute‑force attacks exploit. System hardening/registry changes and segmentation help security generally but are less directly effective against password brute‑forcing.