mediumMultiple ChoiceObjective-mapped
SSCP Practice Question: A security analyst notices a sudden increase in…
A security analyst notices a sudden increase in failed login attempts from a single IP address across multiple user accounts. Which risk response strategy is most appropriate to implement immediately?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Risk mitigation by blocking the IP address
Blocking the IP address is immediate risk mitigation that stops the ongoing attack. Option B is wrong because changing all passwords is a more disruptive and time-consuming remediation step, not the immediate first response. Option C is wrong because risk transfer (e.g., cyber insurance) does not stop the active threat. Option D is wrong because risk acceptance is not appropriate when an active threat is present.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Risk mitigation by blocking the IP address
Why this is correct
Blocking the source IP mitigates the ongoing brute-force attempt.
- ✗
Risk remediation by changing all user passwords
Why it's wrong here
Remediation is less immediate and may not prevent the current attack from the same IP.
- ✗
Risk transfer
Why it's wrong here
Transferring risk via insurance does not stop the immediate threat.
- ✗
Risk acceptance
Why it's wrong here
Acceptance would mean tolerating the ongoing attack, which is not prudent.
Go deeper
Related to this question
About these practice questions
This SSCP question is part of Courseiva's 920-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.