Exam 220-1002 topic 1 question 514 discussion

Actual exam question from CompTIA's 220-1002

Question #: 514
Topic #: 1

The Chief Executive Officer at a bank recently saw a news report about a high-profile cybercrime where a remote access tool that the bank uses for support was also used in this crime. The report stated that attackers were able to brute force passwords to access systems.
Which of the following would BEST limit the bank's risk? (Choose two.)

A. Enable multifactor authentication for each support account.
B. Limit remote access to destinations inside the corporate network.
C. Block all support accounts from logging in from foreign countries.
D. Configure a replacement remote-access tool for support cases.
E. Purchase a password manager for remote tool users.
F. Enforce account lockouts after five bad password attempts.

Show Suggested Answer

Suggested Answer: AF 🗳️

by iLikeBeagButt at May 12, 2022, 12:30 a.m.

Comments

Submit Cancel

iLikeBeagButt

Highly Voted 3 years, 1 month ago

I think A and F, not C...

upvoted 14 times

MagnusCarleson

3 years ago

Agreed A, F. By the way...can't thank you enough for taking your time to help on almost all the questions. Cheers!

upvoted 11 times

...

JJay99

Highly Voted 3 years, 1 month ago

i also think it's AF

upvoted 7 times

...

mohdAj

Most Recent 1 year, 7 months ago

Selected Answer: AF

Enable multifactor authentication for each support account (Option A): Multifactor authentication (MFA) adds an extra layer of security by requiring users to provide multiple forms of identification before granting access. This helps protect accounts even if passwords are compromised. Enforce account lockouts after five bad password attempts (Option F): Implementing account lockouts after a certain number of unsuccessful password attempts can help mitigate the risk of brute force attacks by temporarily blocking access to the account after repeated failed login attempts. These measures enhance the security posture of the bank by strengthening access controls and reducing the likelihood of unauthorized access through brute force attacks. The other options may have some benefits, but enabling multifactor authentication and enforcing account lockouts are particularly effective in addressing the specific risks outlined in the scenario.

upvoted 1 times

...

Ren758

2 years, 9 months ago

Selected Answer: AF

Agree with AF

upvoted 3 times

...