200-301 Question 423
Select 3A network administrator is tasked with implementing a new password policy for all devices in the organization. The policy must ensure strong security by enforcing password complexity, secure management practices, and periodic changes. Which combination of practices should the administrator implement to meet these requirements?
- A
Require passwords to include a mix of uppercase, lowercase, numbers, and special characters.
- B
Ensure that passwords are stored in plain text for easier recovery in case they are forgotten.
- C
Set a maximum password age to require periodic password changes.
- D
Use centralized authentication systems, such as RADIUS or TACACS+, for password management.
- E
Allow the reuse of previous passwords to simplify password creation.
Show answer and explanation
Correct answers: A, C, D
Explanation
A robust password policy includes enforcing password complexity, ensuring secure management practices, and requiring periodic changes. By requiring a mix of character types, setting a maximum password age, and using centralized authentication systems, the administrator can ensure strong password security and reduce the risk of unauthorized access.
- A. Correct.
This is correct because enforcing a mix of character types increases password complexity and makes passwords harder to guess.
- B. Incorrect.
This is incorrect because storing passwords in plain text is a major security vulnerability; passwords should always be hashed and stored securely.
- C. Correct.
This is correct because setting a maximum password age enforces periodic changes, reducing the risk of compromised passwords being used indefinitely.
- D. Correct.
This is correct because centralized authentication systems improve password management and security by providing a consistent and secure way to manage credentials.
- E. Incorrect.
This is incorrect because allowing password reuse weakens security by increasing the likelihood of compromised passwords being used again.