A hacker has discovered a simple way to disrupt business for the day in a small company which
relies on staff working remotely. In a matter of minutes the hacker was able to deny remotely
working staff access to company systems with a script. Which of the following security controls is
the hacker exploiting?

A.
DoS

B.
Account lockout

C.
Password recovery

D.
Password complexity

Explanation:
B: Account lockout automatically disables an account due to repeated failed log on attempts. The
hacker must have executed a script to repeatedly try logging on to the remote accounts, forcing
the account lockout policy to activate.