312-39V2: Certified SOC Analyst v2

Question

At a large healthcare organization, the Security Operations Center (SOC) identifies a surge in failed login attempts against employee accounts, suggesting a possible brute-force attack. To contain the threat, the team acts quickly to prevent unauthorized access. However, it must also implement a security measure that strengthens account protection beyond merely stopping the current attack and reduces the risk of similar future incidents.

During the Containment Phase, which action would best improve long-term account security against brute-force attacks?

Explanation

Multi-factor authentication requires an additional form of identity verification beyond a password. This prevents an attacker who guesses or obtains a password through brute-force attempts from accessing the account without the second factor, providing durable protection against future password-based attacks.

Learn more

Microsoft Entra multifactor authentication overview

312-39V2: Certified SOC Analyst v2

AstroTutor

Notes

Readiness

QuestionQ100

Community Discussion