sc-900 Practice Question 1768
Exam: sc-900
Domain: Describe the concepts of security, compliance, and identity
Topic: Describe security concepts
Difficulty: medium
In Contoso Ltd's hybrid cloud environment, they have noticed a significant increase in failed login attempts from a particular IP address. This IP address is also known to be associated with a previous data breach. What action should be taken to address this potential security threat using Defense in Depth principles?
Answer Options
A
Providing training to users about safe online behavior
B
Implementing rate limiting and blocking the IP address
C
Expanding the storage capacity of the hybrid cloud environment
D
Upgrading the hardware of the on-premises servers
Correct Answer
B: Implementing rate limiting and blocking the IP address
Explanation
The correct answer is B. Implementing rate limiting on login attempts and blocking the IP address are effective measures to mitigate the risk. Option A is incorrect as it focuses on educating users, which does not address the immediate threat. Option C is incorrect because it suggests increasing storage capacity, which does not impact security. Option D is incorrect as it does not address the specific threat of failed login attempts from a known malicious IP address.