In the last hour, a high volume of failed RDP authentication attempts has been logged...

CompTIA CS0-003 Question Answer

In the last hour, a high volume of failed RDP authentication attempts has been logged on a critical server. All of the authentication attempts originated from the same remote IP address and made use of a single valid domain user account. Which of the following mitigating controls would be most effective to reduce the rate of success of this brute-force attack? (Select two).

Increase the granularity of log-on event auditing on all devices.

Enable host firewall rules to block all outbound traffic to TCP port 3389.

Configure user account lockout after a limited number of failed attempts.

Implement a firewall block for the IP address of the remote system.

Install a third-party remote access tool and disable RDP on all devices.

Block inbound to TCP port 3389 from untrusted remote IP addresses at the perimeter firewall.