A Security Analyst Received an After-Hours Alert Indicating That a Large

question 832

Multiple Choice

A security analyst received an after-hours alert indicating that a large number of accounts with the suffix "admin" were locked out. The accounts were all locked out after five unsuccessful login attempts, and no other accounts on the network triggered the same alert. Which of the following is the BEST explanation for these alerts?

• A) The standard naming convention makes administrator accounts easy to identify and they were targeted for an attack.
• B) The administrator accounts do not have rigid password complexity rules, and this made them easier to crack.
• C) The company has implemented time-of-day restrictions, and this triggered a false positive alert when the administrators tried to log in.
• D) The threshold for locking out administrator accounts is too high, and it should be changed from five to three to prevent unauthorized access attempts.

---

Definitions:

Direct Connections

Immediate, firsthand relationships or linkages between entities without intermediaries.

Personal Copy

An individual's own version or edition of a particular document, book, or software, typically for personal use.

Different Versions

Variations of a product, document, or item designed to meet different needs or preferences.

Explain

To make (an idea, situation, or problem) clear to someone by describing it in more detail or revealing relevant facts.