Question $6(4$ points$)$

$13$

$14$

Listen

You manage a network at a small company and the latest mandatory security guidelines have been released that govern your business. The guidelines mandate an account lockout after $5$ failed login attempts to the core business application. Unfortunately, the application cannot be configured to support account lockouts. Your plan is to configure the account lockout on your network login accounts because you need to access the network to access the application. This is an example of what type of control?

Question $7(4$ points$)$

Listen

To minimize the risk of an attacker learning your password, you have a policy of never writing down passwords. What type of control is this policy?