Exam CIPT topic 1 question 96 discussion

Actual exam question from IAPP's CIPT

Question #: 96
Topic #: 1

A privacy engineer has been asked to review an online account login page. He finds there is no limitation on the number of invalid login attempts a user can make when logging into their online account.
What would be the best recommendation to minimize the potential privacy risk from this weakness?

A. Implement a CAPTCHA system.
B. Develop server-side input validation checks.
C. Enforce strong password and account credentials.
D. Implement strong Transport Layer Security (TLS) to ensure an encrypted link.

Show Suggested Answer

Suggested Answer: A 🗳️

by 837vq3 at Oct. 23, 2021, 5:57 p.m.

Comments

Submit Cancel

Ssourav

11 months, 1 week ago

Selected Answer: A

A. Implement a CAPTCHA system. A CAPTCHA system helps to prevent automated attacks and limit the number of invalid login attempts, reducing the risk of unauthorized access and protecting user privacy.

upvoted 2 times

...

z80r

2 years, 5 months ago

Selected Answer: A

A is the right answer

upvoted 2 times

Stants

1 year, 4 months ago

The best recommendation to minimize the potential privacy risk from this weakness would be A. Implement a CAPTCHA system. A CAPTCHA system can help prevent automated attacks, such as brute force or password spraying attacks, by requiring users to prove they are human before they can proceed. This would effectively limit the number of invalid login attempts because an attacker would need to solve a CAPTCHA challenge for each attempt, which is computationally expensive and time-consuming. This makes automated attacks much less feasible. Please note that this should be used in conjunction with other security measures like account lockouts after a certain number of failed attempts, strong password policies, and encryption to provide a comprehensive security solution.

upvoted 1 times

...