220-1102 Question 562
Single answerPassword managersA small accounting firm recently adopted a password manager after several employees were found reusing the same password across multiple websites. One employee says the password manager is "too much trouble" and wants to store all company passwords in a spreadsheet protected with a single ZIP password so the team can share it easily. The technician needs to recommend the BEST solution that improves security while still making daily logins practical for staff. What should the technician recommend?
- A
Use the password manager to generate unique, complex passwords for each site and protect the vault with a strong master password and MFA
- B
Store all passwords in an encrypted spreadsheet on a shared drive so everyone can access the latest version
- C
Create one complex password for all company websites so employees only need to remember a single credential
- D
Write passwords down and store them in a locked desk drawer so they are offline and cannot be stolen remotely
Show answer and explanation
Correct answer: A
Explanation
The best answer is to use a password manager properly: generate unique passwords for every account, secure the vault with a strong master password, and enable MFA. This aligns with widely accepted security best practices from organizations such as NIST, which recommends using password managers to support stronger, unique passwords and reduce reuse. In real-world support scenarios, technicians should discourage informal methods such as spreadsheets, reused passwords, or handwritten lists because they increase the risk of compromise, reduce accountability, and make secure credential management harder.
- A. Correct.
This is the best recommendation because a password manager is specifically designed to reduce password reuse by generating and storing unique, complex passwords for each account. Protecting the vault with a strong master password and multifactor authentication adds another layer of security if the master password is exposed or guessed. This approach is practical because employees only need to remember one strong master password while the manager handles the rest.
- B. Incorrect.
This is incorrect because a spreadsheet, even if encrypted or ZIP-protected, is not a proper password management solution for routine credential storage and sharing. Shared files are harder to audit, easier to copy, and often encourage broad access to sensitive credentials. This option may seem convenient, but it lacks the secure vault controls, autofill protections, credential generation, and access management features associated with password managers.
- C. Incorrect.
This is incorrect because using one password across multiple websites is a major security risk. If one site is compromised, attackers can try the same password elsewhere in a credential-stuffing attack. A complex password is not enough if it is reused. Someone might choose this option because it seems easier for users, but it directly undermines one of the main benefits of using a password manager.
- D. Incorrect.
This is incorrect because storing passwords on paper in a desk drawer may reduce some remote risks, but it creates physical security and availability problems and is not practical for modern business workflows. It also does not scale well, does not support secure updates, and can result in unauthorized access by anyone who finds the written passwords. It is not a suitable replacement for a password manager in a business environment.