312-96: Certified Application Security Engineer (Java)

By ECCouncil · Question Mode

QuestionQ13

VerifiedUnderstanding Application Security, Threats, and Attacks

On a certain website, a secure login feature is intended to prevent brute-force attacks by implementing an account-lockout mechanism. An account is automatically locked after five failed attempts. This feature prevents users from logging in to the website until their account is unlocked. However, this security feature could be abused to carry out a __________ attack.

Explanation

An account-lockout threshold can be exploited by repeatedly submitting invalid credentials for a victim’s account until the lockout is triggered. The legitimate user is then unable to sign in until the account is unlocked, causing a denial of service.

Community Discussion

No comments yet. Be the first to start the discussion!