CompTIA Security+ (SY0-501) — Question 1018

Joe notices there are several user accounts on the local network generating spam with embedded malicious code.
Which of the following technical control should Joe put in place to BEST reduce these incidents?

Answer options

• A. Account lockout
• B. Group Based Privileges
• C. Least privilege
• D. Password complexity

Correct answer: A

Explanation

Implementing account lockout will help prevent further spam generation by locking accounts after a specified number of failed login attempts, thereby reducing unauthorized access. While the other options such as Group Based Privileges, Least Privilege, and Password Complexity are important for overall security, they do not directly address the immediate issue of stopping spam from compromised accounts.