Multiple choice technology security

Account lockouts should

  1. Only be used on administrator accounts to ensure continuous access to users

  2. Only be used on user accounts to ensure that administrators are not locked out of the application

  3. Only be used when there is a secure process to unlock the account

  4. None of the above
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Account lockouts prevent brute-force attacks but can cause denial of service if not managed carefully. They should only be used when there is a secure, reliable process to unlock the account. Limiting lockouts only to administrators or only to users is incorrect and creates either security gaps or denial-of-service risks.

Keep practicing — related questions