ITPEC IP April 2026 Question 37

Brute force attack — repeated password guesses are limited by locking the target ID after a preset number of failures.

Brute force systematically tries many candidate passwords. An attempt limit stops rapid unlimited guessing and forces delay or administrative recovery, greatly increasing attack cost.

Answer (c)

Why not others: (a) DoS overwhelms availability; lockout may itself be abused but does not generally prevent DoS. (b) SQL injection exploits unsafe database queries. (d) Phishing deceives users into revealing information.

Key rule: Account lockout and rate limiting directly counter repeated online authentication guesses.

AI-generated — may contain errors