CompTIA Security+ (SY0-601) — Question 86

A worldwide manufacturing company has been experiencing email account compromises. In one incident, a user logged in from the corporate office in France, but then seconds later, the same user account attempted a login from Brazil. Which of the following account policies would BEST prevent this type of attack?

Answer options

Correct answer: B

Explanation

The 'Impossible travel time' policy identifies logins that occur in an unfeasibly short span of time between two locations, such as France and Brazil, thus preventing unauthorized access. Options like 'Network location' and 'Geofencing' focus on geographic boundaries but may not address the timing aspect, while 'Geolocation' simply tracks locations without preventing rapid logins from disparate areas.