Eccouncil Exam ECSS Topic 3 Question 72 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 72
Topic #: 3

[All ECSS Questions]

Robert, a security specialist, was appointed to strengthen the security of the organization's network. To prevent multiple login attempts from unknown sources, Robert implemented a security strategy of issuing alerts or warning messages when multiple failed login attempts are made.

Which of the following security risks is addressed by Robert to make attempted break-ins unsuccessful?

AIndefinite session timeout

BAbsence of account lockout for invalid session IDs

CSmall session-ID generation

DWeak session-ID generation

Show Suggested Answer

Suggested Answer: A

by Nieves at Aug 06, 2023, 09:25 AM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ozell

2 months ago

Bingo! The correct answer is B. Absence of account lockout for invalid session IDs. Gotta love a good security strategy that nips those break-in attempts in the bud. Robert's on the ball with this one.

upvoted 0 times

Rochell

9 days ago

Nice job, Robert! That's a smart move to prevent unauthorized access.

upvoted 0 times

...

Bong

13 days ago

D) Weak session-ID generation

upvoted 0 times

...

Leslie

17 days ago

User 3: Robert did a good job implementing that security measure to keep the network safe.

upvoted 0 times

...

Marti

26 days ago

C) Small session-ID generation

upvoted 0 times

...

Cecil

28 days ago

B) Absence of account lockout for invalid session IDs

upvoted 0 times

...

Cristal

29 days ago

User 2: Yeah, that's right. It's important to have that in place to prevent break-ins.

upvoted 0 times

...

Leonie

1 months ago

User 1: I think the answer is B) Absence of account lockout for invalid session IDs.

upvoted 0 times

...

Mignon

1 months ago

A) Indefinite session timeout

upvoted 0 times

...

Charlene

2 months ago

Weak session-ID generation? Nah, that's not the issue here. This is all about preventing those pesky login attempts from unknown sources. Way to go, Robert! Keeping the bad guys out, one alert at a time.

upvoted 0 times

...

Charlesetta

2 months ago

Hmm, I'd say this is addressing the issue of brute-force attacks. Alerting on multiple failed attempts is a smart move to catch those sneaky login attempts. Robert's got the right idea - keep those digital intruders out!

upvoted 0 times

Eura

1 months ago

D) Weak session-ID generation

upvoted 0 times

...

Rozella

1 months ago

C) Small session-ID generation

upvoted 0 times

...

Felice

1 months ago

B) Absence of account lockout for invalid session IDs

upvoted 0 times

...

Kallie

1 months ago

A) Indefinite session timeout

upvoted 0 times

...

Billi

2 months ago

Ah, the age-old problem of unauthorized access! I bet Robert is feeling like a security superhero right now. Locking down those login attempts is the way to go - gotta keep those hackers at bay, you know?

upvoted 0 times

...

Tamie

2 months ago

I believe option B) Absence of account lockout for invalid session IDs is the security risk addressed by Robert. Locking out accounts after multiple failed attempts can prevent unauthorized access.

upvoted 0 times

...

Nan

2 months ago

I agree with Kris. By issuing alerts, Robert is making it harder for attackers to guess valid credentials through trial and error.

upvoted 0 times

...

Kris

2 months ago

I think Robert is addressing the risk of brute force attacks by implementing alerts for multiple failed login attempts.

upvoted 0 times

...