100-140 Question 349
Select 3You are tasked with creating a new account for a company employee. Which of the following are considered strong password practices that should be implemented to ensure account security?
- A
Use a password that is at least 12 characters long and includes a mix of uppercase, lowercase, numbers, and special characters.
- B
Set the password to the employee’s first name combined with their birth year for easier recall.
- C
Enable multi-factor authentication (MFA) in addition to requiring a strong password.
- D
Avoid using the same password across multiple accounts or systems.
- E
Store passwords in a text file on the desktop for quick access.
Show answer and explanation
Correct answers: A, C, D
Explanation
Strong password practices involve creating complex, unique passwords and complementing them with additional security measures like multi-factor authentication. Avoid using personal information or insecure storage methods to protect against unauthorized access.
- A. Correct.
This is a strong password practice because longer passwords with complexity (uppercase, lowercase, numbers, and special characters) are more resistant to brute-force attacks.
- B. Incorrect.
Using personal information, such as an employee’s first name and birth year, makes passwords easy to guess through social engineering or data breaches.
- C. Correct.
Enabling MFA provides an additional layer of security by requiring a second form of verification, even if the password is compromised.
- D. Correct.
Reusing passwords across multiple accounts increases vulnerability because a breach in one system can compromise others.
- E. Incorrect.
Storing passwords in plain text on the desktop is a poor security practice since it exposes passwords to unauthorized access if the system is compromised.