100-140 Question 350
Select 2You are assisting a user who recently experienced a data breach. During your investigation, you discover the user had been using 'password123' as their account password across multiple platforms. What are the best practices the user should implement to prevent such incidents in the future? (Select TWO.)
- A
Enable multi-factor authentication (MFA) where available.
- B
Use the same password for all accounts to make it easier to remember.
- C
Create a password using a mix of uppercase, lowercase, numbers, and special characters.
- D
Store passwords in a shared document for easy access.
- E
Avoid changing passwords regularly to reduce the risk of forgetting them.
Show answer and explanation
Correct answers: A, C
Explanation
Strong passwords and good password practices are critical in protecting user accounts from breaches. Enabling MFA adds an extra layer of protection beyond just a password, while creating complex passwords makes them harder to guess or crack. These practices, combined with avoiding insecure behaviors like password reuse or unsafe storage, help minimize the risk of unauthorized access.
- A. Correct.
Enabling multi-factor authentication (MFA) adds an additional layer of security, making it harder for attackers to gain access even if they have the password.
- B. Incorrect.
Using the same password for all accounts is a bad practice because if one account is breached, all other accounts using the same password are also at risk.
- C. Correct.
Creating strong passwords with a mix of uppercase, lowercase, numbers, and special characters makes them harder to guess or crack using brute force attacks.
- D. Incorrect.
Storing passwords in a shared document is insecure and increases the risk of unauthorized access if the document is compromised.
- E. Incorrect.
While it can be inconvenient to change passwords regularly, avoiding password changes can leave accounts vulnerable, especially if a password has been exposed.