Question
Recommend three complementary measures a website should use to prevent unauthorised access to user accounts.
Mark scheme — three of (1 each):
- Strong password policy + hashing (B1)
- Two-factor authentication (B1)
- CAPTCHA on login attempts (B1)
- Account lockout after failed attempts (B1)
- Email confirmation for sign-ups and password reset (B1)
- Automatic security patching (B1)
3 marks · take your time before peeking.
Sign up to try the next 30 problems
Save your streak, mark answers against the spec, and build a daily revision habit. Free during public beta — no card, no auto-renew.
Generated by TopMyGrade AI · cross-check official sources before relying on the mark-scheme phrasing.