QuestionQ445
Vulnerability ManagementJohn is a professional Ethical Hacker assigned to test the security of www.we-are-secure.com. He successfully carries out a brute-force attack on the We-are-secure server. He now recommends countermeasures to prevent such brute-force attacks on that server. Which of the following are countermeasures against a brute-force attack?
Each correct answer represents a complete solution. Choose all that apply.
Choose two
- A The site should restrict the number of login attempts to only three times.
- B The site should increase the encryption key length of the password.
- C The site should use CAPTCHA after a specific number of failed login attempts.
- D The site should force its users to change their passwords from time to time.
Community Discussion