CompTIA Network+ Exam Question: Mitigating Brute-Force Attacks on Email Passwords

Network Administrator's Guide to Mitigating Brute-Force Attacks on Email Passwords

Prev Question Next Question

Question

The network administrator is informed that a user's email password is frequently hacked by brute-force programs.

Which of the following policies should the network administrator implements to BEST mitigate this issue? (Choose two.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E. F.

BC.

The best policies to implement to mitigate the issue of a user's email password frequently being hacked by brute-force programs are two-factor authentication and complex passwords.

Two-factor authentication is a security mechanism that requires two forms of identification before granting access to an account. This additional layer of security makes it much more difficult for hackers to gain unauthorized access, even if they have the user's password. By implementing two-factor authentication, the network administrator can ensure that even if the user's password is compromised, the attacker will still need access to a second factor, such as a security token or biometric identifier, to gain access.

Complex passwords are another important policy to implement. A complex password is one that is difficult to guess or crack using automated tools. A strong password should include a mix of uppercase and lowercase letters, numbers, and special characters. By requiring users to use complex passwords, the network administrator can make it much more difficult for brute-force programs to guess the password.

Captive portal, geofencing, role-based access, and explicit deny are not directly related to mitigating the issue of a user's email password being hacked by brute-force programs.

A captive portal is a web page that users are redirected to when they attempt to access the network. It is used to provide a message or require the user to agree to certain terms before accessing the network. It does not directly mitigate the issue of password hacking.

Geofencing is a technique used to create a virtual boundary around a specific location, such as an office or campus. It is used to control access to certain resources based on location. It is not directly related to mitigating the issue of password hacking.

Role-based access is a security model that restricts access to resources based on a user's role within the organization. It is an important policy to implement for overall network security, but it is not directly related to mitigating the issue of password hacking.

Explicit deny is a security measure that explicitly denies access to resources. It is used in conjunction with role-based access and other security measures to further restrict access to certain resources. It does not directly mitigate the issue of password hacking.

In conclusion, the best policies to implement to mitigate the issue of a user's email password being hacked by brute-force programs are two-factor authentication and complex passwords.