Systems Security Certified Practitioner – SSCP – Question0215

Which of the following is not a preventive login control?

A.
Last login message
B. Password aging
C. Minimum password length
D. Account expiration

Correct Answer: A

Explanation:

The last login message displays the last login date and time, allowing a user to discover if their account was used by someone else. Hence, this is rather a detective control. Source: RUSSEL, Deborah & GANGEMI, G.T. Sr., Computer Security Basics, O’Reilly, July 1992 (page 63).