Multiple choice technology security

While using "Forgot Password" feature by user to recover the password, what should be checked first

  1. whether the credentials provided are valid and correct

  2. whether account is already disabled

  3. whether account is locked

  4. whether the CAPTCHA values entered by the user same as what is in the image
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Before sending a recovery link or running CPU-intensive operations like CAPTCHA validation, the application must verify the basic status of the account, specifically whether it is already disabled, to prevent abuse. Other checks can follow or are irrelevant if the account cannot be recovered.

Keep practicing — related questions