200-301 Question 424
Select 3A network administrator is configuring password policies on a Cisco device to enhance security. Which of the following actions should the administrator take to ensure proper password management and security compliance?
- A
Require passwords to contain a mix of uppercase, lowercase, numbers, and special characters
- B
Set a maximum password age to enforce regular password changes
- C
Allow users to reuse their previous passwords for convenience
- D
Implement a minimum password length of at least 8 characters
- E
Disable account lockouts to avoid user inconvenience during multiple failed login attempts
Show answer and explanation
Correct answers: A, B, D
Explanation
To ensure secure password management, a strong password policy should enforce complexity, regular updates, and a minimum length. Avoid allowing password reuse or disabling account lockouts, as these practices can compromise the security of the system.
- A. Correct.
Requiring a mix of character types ensures password complexity, making it harder for attackers to guess or brute-force passwords.
- B. Correct.
Setting a maximum password age enforces periodic password changes, minimizing the risk of compromised credentials being exploited over time.
- C. Incorrect.
Allowing password reuse undermines security by enabling users to repeatedly use potentially compromised or weak passwords.
- D. Correct.
A minimum password length of at least 8 characters significantly increases the difficulty of brute-force attacks.
- E. Incorrect.
Disabling account lockouts can expose the system to brute-force attacks, as there would be no penalty for repeated failed login attempts.