Multiple choice technology security

Account lockouts should

  1. Only be used on administrator accounts to ensure continuous access to users

  2. Only be used on user accounts to ensure that administrators are not locked out of the application

  3. Only be used when there is a secure process to unlock the account

  4. None of the above
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Account lockouts prevent brute force attacks, but only if there is a secure unlock process. If only administrators can unlock accounts, attackers can lock out all admins by intentionally failing login attempts. The unlock process must itself be secure (e.g., verified identity) to prevent abuse.

Keep practicing — related questions