A web developer wants to ensure that a new web application is not vulnerable to brute-force attacks. Which of
the following best practices is MOST useful to meet this goal?


A. Input validation
B. System updates
C. Password lockout
D. Login auditing