ITPEC IP October 2022 Question 43
ITPEC IP October 2022 — Question 43 of 100
Encrypted communication protects a password from interception, and limiting login attempts restricts brute-force guessing. TLS prevents observers from reading credentials in transit, while rate limits, delays, or lockouts reduce how many candidate passwords an attacker can test.
Answer (b)
Why not others:
- single sign-on improves access convenience but does not stop repeated guesses
- a difficult password helps resist guessing but does not prevent theft during unencrypted transmission
Key rule: Match controls to threats: encrypt credentials against eavesdropping and throttle authentication attempts against automated search.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.