200-301 Question 428
Select 3A network administrator is tasked with securing access to a company's internal systems. They want to reduce reliance on traditional passwords, improve security, and ensure that only authorized users can access sensitive resources. Which of the following methods can they implement to achieve this goal?
- A
Enable multifactor authentication (MFA) using a mobile app for verification.
- B
Use digital certificates to authenticate devices and users.
- C
Configure static passwords with a minimum length of 12 characters.
- D
Implement biometric authentication methods like fingerprint scanning or facial recognition.
- E
Disable password requirements entirely for faster login processes.
Show answer and explanation
Correct answers: A, B, D
Explanation
To reduce reliance on traditional passwords and improve security, the network administrator can implement multifactor authentication (MFA), use digital certificates for authentication, and incorporate biometric methods. These approaches enhance security by leveraging additional verification factors and eliminating sole dependence on passwords. Static passwords, even if longer, and disabling passwords without alternatives do not address the primary goal of reducing reliance on traditional passwords.
- A. Correct.
Multifactor authentication (MFA) enhances security by requiring multiple forms of verification, such as something the user knows (password) and something the user has (mobile app). This reduces reliance on static passwords, making it a valid solution.
- B. Correct.
Digital certificates authenticate both devices and users, ensuring secure access without relying solely on passwords. This is a strong alternative to traditional password-based authentication.
- C. Incorrect.
Configuring longer static passwords improves security to some extent but does not eliminate the reliance on passwords. This is not an alternative to passwords.
- D. Correct.
Biometric authentication methods, like fingerprint or facial recognition, are effective alternatives to traditional passwords. They provide an additional layer of security and convenience.
- E. Incorrect.
Disabling password requirements without implementing a secure alternative would result in a significant security vulnerability. This is not a recommended practice.