200-301 Question 422
Select 4A network administrator is tasked with creating a password policy to enhance security for all network devices in the organization. Which of the following elements should be included in the password policy to ensure proper management and complexity?
- A
Enforce a minimum password length of at least 8 characters
- B
Require the use of at least one uppercase letter, one number, and one special character
- C
Allow passwords to be reused after 5 previous uses
- D
Set a password expiration period of 90 days
- E
Disable user accounts after 3 failed login attempts
Show answer and explanation
Correct answers: A, B, D, E
Explanation
A strong password policy incorporates elements of management and complexity to enhance security. Management includes practices such as enforcing password expiration and disabling accounts after failed login attempts, while complexity ensures that passwords are difficult to guess or crack. Allowing password reuse weakens the security posture and should not be part of a robust password policy.
- A. Correct.
Correct: A minimum password length is crucial to make brute-force attacks more difficult.
- B. Correct.
Correct: Requiring complexity, such as uppercase letters, numbers, and special characters, strengthens password security.
- C. Incorrect.
Incorrect: Allowing password reuse undermines password security as it increases the risk of compromised passwords being used again.
- D. Correct.
Correct: Setting a password expiration period ensures that passwords are regularly updated, reducing the risk of long-term compromise.
- E. Correct.
Correct: Disabling accounts after a limited number of failed attempts helps to prevent brute-force attacks.