ITPEC IP April 2020 Question 35
ITPEC IP April 2020 — Question 35 of 100
Encrypted communication protects a password from theft in transit, while limiting login attempts restrains brute-force guessing. TLS prevents readable interception between browser and server, and rate limits or lockouts stop an attacker from trying unlimited combinations.
Answer (b)
Why not others:
- single sign-on reduces repeated authentication but does not itself stop brute-force attempts
- a hard-to-guess password helps against guessing, but the first requested measure specifically addresses theft during transmission
Key rule: Match controls to threats: encrypt exposed credentials and throttle repeated authentication failures.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.