200-201 Security Concepts Practice Question
A security analyst is reviewing logs from a web server and notices a high volume of HTTP requests from a single IP address targeting the same login page within a short time frame. The analyst suspects a brute force attack. Which TWO actions are most appropriate to mitigate this type of attack? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement rate limiting on the login endpoint.
Implementing account lockout after a few failed attempts prevents further brute force attempts on the same account. Rate limiting restricts the number of requests from a single IP, slowing down the attack.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Implement rate limiting on the login endpoint.
Why this is correct
Rate limiting slows down the attacker's requests.
- ✗
Disable the login page entirely.
Why it's wrong here
This would prevent legitimate users from logging in, affecting availability.
- ✗
Block all traffic from the offending IP address permanently.
Why it's wrong here
Permanent blocking may be too aggressive; the IP could be spoofed or shared.
- ✗
Increase the password complexity requirements.
Why it's wrong here
While good practice, it does not mitigate the immediate brute force attack.
- ✓
Implement account lockout after a certain number of failed attempts.
Why this is correct
Account lockout stops brute force at the account level.
Go deeper
Related to this question
About these practice questions
One of 979 original 200-201 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.