CompTIA A+ 220-1202 (V15) Practice Question

A failed attempts lockout policy is primarily implemented to enhance security by preventing unauthorized access through brute-force attacks. When too many incorrect login attempts are made, the account gets locked, stopping automated tools from guessing passwords. While it may cause inconvenience to legitimate users if they forget their passwords, the security benefits outweigh this downside. Complex passwords and CAPTCHA can add additional layers of security, but they do not directly prevent brute-force attacks as effectively as failed attempts lockout.