MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is the primary purpose of an account lockout policy in cloud computing?
   a. To accelerate password recovery
   b. To prevent brute-force attacks
   c. To enable unlimited login attempts
   d. To allow credential sharing
   Answer: b. To prevent brute-force attackstechtarget+1
2. Which policy setting specifies the number of failed login attempts before account lockout occurs?
   a. Account lockout duration
   b. Account lockout threshold
   c. Reset counter
   d. Password length
   Answer: b. Account lockout thresholdcloudblue+1
3. What does “account lockout duration” determine in an account lockout policy?
   a. Number of permitted users
   b. Time accounts remain locked
   c. Length of passwords
   d. Times users can log in
   Answer: b. Time accounts remain lockedlepide+1
4. Why should account lockout policies be balanced to avoid too frequent lockouts?
   a. They reduce password strength
   b. They frustrate legitimate users
   c. They accelerate system attacks
   d. They enhance productivity
   Answer: b. They frustrate legitimate usersmanageengine+1
5. What is credential stuffing in relation to account lockouts?
   a. Changing login credentials
   b. Using multiple passwords in bulk attacks
   c. Encrypting user accounts
   d. Disabling account lockout
   Answer: b. Using multiple passwords in bulk attacksowasp+1
6. In Microsoft Entra Domain Services, what is the default number of bad password attempts before lockout?
   a. Three
   b. Five
   c. Seven
   d. Ten
   Answer: b. Fivelearn.microsoft
7. What is the recommended account lockout duration for most organizations?
   a. 1 minute
   b. 5 minutes
   c. 30 minutes
   d. Forever
   Answer: c. 30 minuteslepide+1
8. Which method can be used to unlock a locked account?
   a. Automatic unlock
   b. Manual admin unlock
   c. System restart
   d. Both a and b
   Answer: d. Both a and bspecopssoft+1
9. What problem arises when the account lockout threshold value is set too low?
   a. Increased security
   b. Higher risk of denial-of-service
   c. Reduced help desk tickets
   d. Lower password quality
   Answer: b. Higher risk of denial-of-servicelepide
10. What policy resets the bad login attempts after a specific period?
    a. Lockout counter reset
    b. Login retry timer
    c. Password change schedule
    d. Session expiration period
    Answer: a. Lockout counter resetcloudblue+1
11. Account lockout policies help organizations comply with which security requirement?
    a. Data retention
    b. Authentication hardening
    c. Server redundancy
    d. Encryption settings
    Answer: b. Authentication hardeningredhat+1
12. Excessive lockouts can result in high volumes of what operational issue?
    a. Hardware failures
    b. Network congestion
    c. Help desk tickets
    d. Data loss
    Answer: c. Help desk ticketsmanageengine+1
13. Which attack is mitigated by account lockout policies?
    a. Phishing
    b. Brute-force attacks
    c. Distributed denial of service
    d. Man-in-the-middle
    Answer: b. Brute-force attacksmanageengine+2
14. What is a suggested lockout threshold to balance usability and security?
    a. 1 attempt
    b. 50 attempts
    c. 15-50 attempts
    d. Unlimited attempts
    Answer: c. 15-50 attemptslepide
15. Which account type may require weaker lockout policies due to critical accessibility?
    a. Admin accounts
    b. Service accounts
    c. Vendor accounts
    d. Guest accounts
    Answer: b. Service accountsinformatica+1
16. What is authentication backoff?
    a. Password change interval
    b. Increasing delay after each failed login
    c. Immediate account deletion
    d. Blocking admin access
    Answer: b. Increasing delay after each failed logintechtarget
17. Where are account lockout policies typically configured in Windows environments?
    a. Control Panel → Network Settings
    b. Group Policy Management Console
    c. Task Scheduler
    d. Device Manager
    Answer: b. Group Policy Management Consolemanageengine+1
18. What is the impact of setting lockout duration to zero?
    a. Accounts never locked out
    b. Accounts only unlocked by admin
    c. Automatic unlocks after 5 minutes
    d. Passwords not required
    Answer: b. Accounts only unlocked by adminspecopssoft+1
19. What is the main risk of too high a threshold for lockout?
    a. Frequent legitimate lockouts
    b. Easy brute-force exploitation
    c. Unauthorized admin access
    d. Slow system performance
    Answer: b. Easy brute-force exploitationlepide
20. What is the user experience drawback of strict account lockout policies?
    a. Passwords become shorter
    b. Accounts locked for legitimate mistakes
    c. Encryption is disabled
    d. Data backups are delayed
    Answer: b. Accounts locked for legitimate mistakestechtarget+1
21. Which attack could intentionally trigger multiple account lockouts as a denial-of-service tactic?
    a. Phishing attack
    b. Password spraying
    c. SQL injection
    d. Directory traversal
    Answer: b. Password sprayingtechtarget+1
22. What factor should organizations consider when setting lockout durations?
    a. Industry-specific security needs
    b. Device battery life
    c. Server location
    d. ISP bandwidth
    Answer: a. Industry-specific security needsmanageengine+1
23. What is the default lockout duration in Microsoft Entra Domain Services?
    a. 2 minutes
    b. 5 minutes
    c. 30 minutes
    d. 1 hour
    Answer: c. 30 minuteslearn.microsoft
24. After how many failed attempts does Oracle Fusion Cloud recommend account lockout?
    a. 1 attempt
    b. 5 attempts
    c. 10 attempts
    d. Unlimited attempts
    Answer: b. 5 attemptsoracle
25. Which setting ensures lockout counters are reset after a prescribed period?
    a. Account lockout threshold
    b. Lockout duration
    c. Reset account lockout counter after
    d. Credential expiration
    Answer: c. Reset account lockout counter aftercloudblue+1
26. Who is usually responsible for unlocking a manually locked account?
    a. Any user
    b. Network admin
    c. Application owner
    d. ISP representative
    Answer: b. Network adminspecopssoft+1
27. Which account type is most vulnerable to brute-force attacks?
    a. Admin account
    b. End-user account
    c. Service account
    d. All the above
    Answer: d. All the aboveinformatica+2
28. What is a recommended reset value for account lockout counter?
    a. 1 minute
    b. Less than lockout duration, typically ≤ 30 minutes
    c. 100 minutes
    d. Never resets
    Answer: b. Less than lockout duration, typically ≤ 30 minutescloudblue+1
29. Smart lockout strategies are designed to stop which actor?
    a. Failed backups
    b. Bad actors (attackers)
    c. Software bugs
    d. Hardware manufacturers
    Answer: b. Bad actors (attackers)learn.microsoft
30. Which platform supports configuring lockout policies via group policy editor?
    a. Windows Server
    b. Android Server
    c. iOS Cloud Manager
    d. Unix Shell
    Answer: a. Windows Servermanageengine+1
31. What is the best practice for “account lockout duration”?
    a. Duration should be set to zero only for highly sensitive systems
    b. Set between 30 to 60 minutes for most cases
    c. Always keep duration unlimited
    d. No specific best practice
    Answer: b. Set between 30 to 60 minutes for most casesmanageengine+1
32. What is one main indicator of a pending cyberattack regarding lockout policies?
    a. Sudden spike in account lockouts
    b. System upgrades
    c. More help desk calls for network access
    d. Longer passwords
    Answer: a. Sudden spike in account lockoutstechtarget+1
33. What should be included with lockout policy documentation?
    a. Encryption keys
    b. Policy details in user security training
    c. Backup configurations
    d. Hardware specifications
    Answer: b. Policy details in user security trainingtechtarget
34. What can happen if account lockout policy settings are too strict?
    a. Legitimate users frequently locked out
    b. Brute-force attacks increase
    c. System uptime improves
    d. Faster password hashing
    Answer: a. Legitimate users frequently locked outlepide+1
35. What type of accounts may need exceptions to lockout policies for continuous availability?
    a. Access accounts
    b. Operational technology accounts
    c. End-user accounts
    d. Guest accounts
    Answer: b. Operational technology accountstechtarget
36. What mechanism can provide a balance between security and usability compared to hard lockouts?
    a. Authentication backoff
    b. Password time limits
    c. Session logs
    d. Guest access
    Answer: a. Authentication backofftechtarget
37. What is a lockout reset policy intended for?
    a. To refresh passwords automatically
    b. To clear failed login count after certain time
    c. To enable multiple user access simultaneously
    d. To update encryption keys
    Answer: b. To clear failed login count after certain timecloudblue+1
38. Which is NOT a main element of account lockout policy?
    a. Threshold
    b. Duration
    c. Encryption algorithm
    d. Reset counter after
    Answer: c. Encryption algorithmspecopssoft+1
39. Why might service accounts frequently cause lockouts?
    a. Static passwords
    b. Cached credentials or scheduled tasks with expired credentials
    c. Disabled encryption
    d. User typing errors
    Answer: b. Cached credentials or scheduled tasks with expired credentialsinformatica+1
40. Why is it important to pilot test account lockout policy changes?
    a. To assess system speed
    b. To monitor unexpected issues before full rollout
    c. To increase backup frequency
    d. To update hardware drivers
    Answer: b. To monitor unexpected issues before full rollouttechtarget
41. Which authentication attack does account lockout directly defend against?
    a. Brute-force
    b. Phishing
    c. Proxy
    d. SSL stripping
    Answer: a. Brute-forceredhat+2
42. How does an account lockout policy support incident detection?
    a. Locks all accounts automatically
    b. Signals potential credential-based attack via lockout spikes
    c. Deletes all user data
    d. Encrypts account passwords
    Answer: b. Signals potential credential-based attack via lockout spikeslepide+1
43. Which of the following is a common cause of accidental lockouts?
    a. Multiple devices signing in
    b. Password reuse
    c. Frequent power outage
    d. High network latency
    Answer: a. Multiple devices signing inlepide
44. What is the range permitted by Active Directory for lockout duration?
    a. 0 to infinite
    b. 0 to 99,999 minutes
    c. 1 to 100 minutes
    d. 10 to 20 minutes
    Answer: b. 0 to 99,999 minutesspecopssoft
45. What happens if “reset account lockout counter after” is set greater than the lockout duration?
    a. No impact
    b. Lockout duration overrides reset policy
    c. Might delay account recovery and frustrate users
    d. System disables all accounts
    Answer: c. Might delay account recovery and frustrate userslepide
46. What is the most common default number of attempts before lockout in cloud security platforms?
    a. Three
    b. Five
    c. Seven
    d. Ten
    Answer: b. Fiveoracle+1
47. Which directory service maintains a record of failed domain logon attempts for lockout policies?
    a. Azure Active Directory
    b. Google Workspace
    c. Primary Domain Controller
    d. LDAP Directory
    Answer: c. Primary Domain Controllerspecopssoft+1
48. How does account lockout duration affect security?
    a. Longer duration increases time to reattempt attacks
    b. Short duration reduces security risks
    c. Duration has no impact
    d. Duration always depends on encryption type
    Answer: a. Longer duration increases time to reattempt attackstechtarget+1
49. What is “authentication hardening” in the context of lockout policies?
    a. Increasing password length
    b. Using policies to prevent unauthorized login attempts
    c. Allowing unlimited logins
    d. Disabling account lockouts entirely
    Answer: b. Using policies to prevent unauthorized login attemptsredhat+1
50. Account lockout policies should be part of which broader IT documentation?
    a. Network topology diagrams
    b. Password and access control policies
    c. Hardware inventory lists
    d. Application installation guides
    Answer: b. Password and access control policieslepide+1

1. https://www.techtarget.com/searchsecurity/tip/Account-lockout-policy-Setup-and-best-practices-explained
2. https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/6/html/identity_management_guide/setting_account-lockout_policies
3. https://docs.cloudblue.com/cbc/20.4/premium/content/Windows-Hosting-Infrastructure-Deployment-Guide/Configuring-Account-Lockout-Policy.htm
4. https://www.lepide.com/blog/active-directory-account-lockout-policy-best-practices/
5. https://www.manageengine.com/vulnerability-management/account-lockout-policy.html
6. https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/04-Authentication_Testing/03-Testing_for_Weak_Lock_Out_Mechanism
7. https://learn.microsoft.com/en-us/entra/identity/domain-services/troubleshoot-account-lockout
8. https://specopssoft.com/blog/active-directory-account-lockout-policy/
9. https://www.manageengine.com/products/active-directory-audit/kb/best-practices/account-lockout-best-practices.html
10. https://docs.informatica.com/data-integration/common-content-for-data-integration/10-5-6/security-guide/users-and-groups/account-lockout/rules-and-guidelines-for-account-lockout.html
11. https://community.oracle.com/customerconnect/discussion/896024/how-to-configure-account-lockout-threshold-and-duration-in-oracle-fusion-cloud
12. https://learn.microsoft.com/en-us/entra/identity/authentication/howto-password-smart-lockout
13. https://www.sanfoundry.com/1000-cloud-computing-questions-answers/
14. https://testbook.com/objective-questions/mcq-on-cloud-technology–5eea6a0d39140f30f369e30f
15. https://www.watelectronics.com/mcq/cloud-computing/
16. https://www.eginnovations.com/documentation/Active-Directory-Server/User-Account-Lockouts-Test.htm
17. https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-5-2-and-earlier/4-5/vmware-cloud-foundation-operations-4-5/password-policy-configuration-operations/configuring-account-lockout-policies-in-vmware-cloud-foundation-operations.html
18. https://www.scribd.com/document/541792862/Cloud-Computing-MCQ-Questions-and-Answers-PDF-Tutorial
19. https://examradar.com/cloud-computing-and-security-challenges-mcqs/
20. https://docs.aveva.com/bundle/asset-information-management/page/999777.html