You can use an on online attack as an opportunity to check that your security systems detect when a server is being bombarded with unsuccessful login attempts, and that individual accounts lock after a small number of unsuccessful login attempts.
Full story »