5.4 Describe Security Password Policy Elements, Such as Management, Complexity, and Password Alternatives (multifactor Authentication, Certificates, and Biometrics) 200-301 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company wants to implement multifactor authentication for a high-security application. The security team has decided to use a password and a one-time code generated by an authenticator app on the user's smartphone. Which statement correctly describes this setup?

   • AIt uses a knowledge factor (password) and a possession factor (smartphone), which qualifies as multifactor authentication.
   • BIt uses a possession factor (password) and an inherence factor (smartphone).
   • CIt uses two knowledge factors because the user must know the password and the code.
   • DIt is single-factor authentication because both factors are transmitted over the network.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a common limitation of biometric authentication compared to password-based authentication?

   • ABiometric data cannot be changed if compromised
   • BBiometric authentication is faster than passwords
   • CBiometric authentication is always less secure than passwords
   • DBiometric authentication requires no hardware
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A multinational corporation uses certificate-based authentication for VPN access. Employees in a remote office report that they cannot connect to the VPN. The help desk finds that the certificates on their laptops have expired. The company wants to prevent this issue in the future without requiring users to manually renew certificates. Which solution should they implement?

   • ASwitch to password-based authentication for remote users.
   • BEnable automatic enrollment and renewal of certificates from the corporate CA.
   • CIssue certificates with a longer validity period, such as 10 years.
   • DUse a shared certificate for all employees in the remote office.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A network administrator is creating a password policy for a new user group. The policy must prevent users from using passwords that are easily guessed from public information about them. Which policy element is specifically designed to address this concern?

   • AMaximum password age
   • BPassword history requirement
   • CMinimum password age
   • DProhibition of common words and personal information
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which practice is recommended for securely storing passwords used by network administrators?

   • AStore them in a shared spreadsheet protected by a strong password
   • BEmail them to yourself so they are available from any device
   • CWrite them on a sticky note kept in a locked drawer
   • DUse a dedicated password manager with encrypted storage and access controls
   Reveal Solution Discussion Select an answer first