Explain Access Management Principles 100-160 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A small business wants to improve password security for its cloud-based email service. The current policy requires only 6 characters and no complexity. Which change would provide the most immediate security improvement while still being practical for users?

   • ABlock the use of common passwords and require at least one special character.
   • BRequire a minimum password length of 12 characters and enable MFA.
   • CImplement a password manager for all employees.
   • DRequire passwords to be changed every 60 days.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is planning to implement a centralized access management system for both Wi-Fi and VPN. The security team wants to enforce MFA, group-based access control, and detailed audit logs. They also want to minimize the number of infrastructure components to manage. Which approach best balances these goals?

   • ADeploy separate RADIUS servers for Wi-Fi and VPN, each with its own MFA and accounting.
   • BUse local authentication on each access point and VPN gateway, with no central server.
   • CUse a single RADIUS server with an integrated MFA module, group-based authorization, and accounting.
   • DUse a RADIUS server for authentication only and rely on the access points for authorization and logging.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary role of RADIUS in a network environment?

   • ATo provide centralized authentication, authorization, and accounting for network access
   • BTo manage digital certificates for all users in an organization
   • CTo encrypt all data traffic between clients and servers
   • DTo replace the need for firewalls by filtering traffic at the application layer
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company is choosing an MFA method for a RADIUS-based VPN. The security team wants to minimize the risk of phishing and also avoid requiring users to install any software on their personal devices. Which MFA method best satisfies both constraints?

   • AEmail-based verification codes.
   • BSoftware authenticator apps that generate time-based one-time passcodes.
   • CHardware security keys that support FIDO2/WebAuthn.
   • DSMS one-time passcodes sent to the user's mobile phone.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company's password policy currently requires passwords to be at least 8 characters and changed every 90 days. After a security review, the company wants to reduce the risk of brute-force attacks without forcing users to change passwords too frequently. Which policy change best addresses this goal?

   • ARemove password expiration entirely and keep the 8-character minimum.
   • BIncrease the minimum password length to 14 characters and keep the 90-day expiration.
   • CAdd a rule that passwords cannot contain the username, but keep the 8-character minimum.
   • DRequire password changes every 30 days while keeping the 8-character minimum.
   Reveal Solution Discussion Select an answer first