Question

A help desk manager notices repeated failed login attempts against several domain user accounts, suggesting an automated password-guessing attack. Management wants to reduce the risk of these brute-force attempts succeeding while minimizing help desk password resets. Which Group Policy setting should the technician configure FIRST to directly counter the automated guessing?

Accepted Answer

Set an account lockout threshold with a defined lockout duration and reset counter

Answer

Increase the minimum password length to 16 characters for all users

Answer

Enable the password history policy to prevent reuse of the last 10 passwords

Answer

Set a maximum password age of 30 days to force more frequent changes