A hacker has discovered a simple way to disrupt business for the day in a small company which relies on staff
working remotely. In a matter of minutes, the hacker was able to deny remotely working staff access to
company systems with a script. Which of the following security controls is the hacker exploiting?

A.
DoS

B.
Account lockout

C.
Password recovery

D.
Password complexity

Explanation:
B: Account lockout automatically disables an account due to repeated failed log on attempts. The hacker must
have executed a script to repeatedly try logging on to the remote accounts, forcing the account lockout policy to
activate.