Explain Access Management Principles 100-160 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company's security policy requires that passwords be changed every 90 days. Employees complain that they often forget their new passwords. Which adjustment would improve security while addressing user frustration?

   • AIncrease the password length requirement and keep the 90-day expiration.
   • BAllow users to reuse their previous password after two changes.
   • CRemove the expiration requirement and instead require MFA.
   • DShorten the expiration period to 30 days.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   A network administrator wants to track which users log in, when they log in, and what resources they access. Which AAA component provides this capability?

   • AAccounting
   • BAuthentication
   • CIdentity management
   • DAuthorization
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company is implementing MFA for all administrative accounts. The security team wants to use a method that does not require users to carry a physical device and is resistant to phishing. Which MFA method best fits these constraints?

   • AEmail-based verification codes.
   • BSMS one-time passcodes sent to the user's mobile phone.
   • CBiometric authentication, such as a fingerprint or facial recognition.
   • DSecurity questions with personal answers.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   An organization requires employees to use a 12-character password and a fingerprint scan to access a secure application. Recently, a phishing email tricked several users into entering their passwords on a fake login page. Which additional control would most directly reduce the impact of similar credential theft?

   • ARequire users to change their passwords every 30 days.
   • BAdd a one-time passcode from an authenticator app as a second factor.
   • CImplement account lockout after three failed attempts.
   • DIncrease the password length to 16 characters.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company is deploying a new RADIUS-based VPN. The security policy requires that users authenticate with a password and a one-time passcode, that only members of the 'vpn-users' group can connect, and that all connection attempts are logged. The RADIUS server currently has no MFA support. Which implementation plan best meets all requirements?

   • ADeploy an MFA proxy in front of the RADIUS server, configure group-based authorization on the RADIUS server, and enable RADIUS accounting.
   • BRequire users to change their passwords every 30 days and enable RADIUS accounting.
   • CUse the RADIUS server's local database for authentication, but do not configure any authorization or accounting.
   • DConfigure the VPN to use a pre-shared key for all users and rely on the RADIUS server for accounting only.
   Reveal Solution Discussion Select an answer first