Salesforce Certified Identity and Access Management Practice

What is a potential risk of not implementing "User Account Lockout" in Salesforce?

1. Inability to access forgotten accounts

2. Higher chances of unauthorized access through brute-force attacks

3. Loss of account data

4. Increased user frustration

The correct answer is: Higher chances of unauthorized access through brute-force attacks

Implementing "User Account Lockout" is essential for enhancing security measures within Salesforce, particularly to mitigate the risks associated with unauthorized access. Without this feature, accounts are more susceptible to brute-force attacks, where an attacker systematically attempts various username and password combinations to gain access. If account lockout is not enforced, attackers can continue this guessing process indefinitely without being thwarted, thereby increasing the likelihood of successful unauthorized access to sensitive information or functionalities within the organization. While other challenges may arise from not having account lockout, such as user frustration or potential data loss, the primary concern in the context of security is the heightened vulnerability to brute-force attacks. This makes option B the most significant risk when not implementing this security feature.