5.4 Describe Security Password Policy Elements, Such as Management, Complexity, and Password Alternatives (multifactor Authentication, Certificates, and Biometrics) 200-301 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An organization is moving from password-based authentication to certificate-based authentication for its internal web applications. The administrator has issued certificates to all users. What is a key advantage of certificate-based authentication over passwords in this scenario?

   • ACertificates never expire, so users do not need to renew them.
   • BCertificates are bound to a key pair, so authentication does not require transmitting a shared secret that could be intercepted.
   • CCertificates eliminate the need for a public key infrastructure.
   • DCertificates can be shared among users to simplify administration.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is planning to replace password-based authentication with certificate-based authentication for its VPN. The IT team has deployed a PKI and issued certificates to all employees. However, the help desk is concerned about supporting users who lose their laptops or need to authenticate from a new device. Which process is essential to maintain security and usability?

   • AAllow users to reuse the same certificate on multiple devices by copying the private key.
   • BRevoke the certificate on the lost laptop and issue a new certificate for the replacement device.
   • CDisable certificate authentication temporarily and fall back to passwords for affected users.
   • DIssue a new certificate without revoking the old one so the user can continue using both.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An administrator is configuring a password policy for a new user group. The policy must prevent users from using the same password across multiple systems. Which mechanism should the administrator implement?

   • AUse a password filter that checks new passwords against a list of previously used passwords across systems.
   • BSet a short password expiration period so users must change passwords frequently.
   • CRequire a minimum password length of 20 characters.
   • DEnable password history in each system individually.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is designing a new password policy. They want to balance security with usability. The current policy requires a 10-character password with complexity and a 60-day rotation. A security audit shows that users often choose passwords based on the current month and year (e.g., 'March2024!'). The company also wants to implement MFA for all users. Which combination of policies would be most effective?

   • AKeep the current password policy but implement MFA.
   • BIncrease minimum length to 14 characters, block common patterns, and implement MFA.
   • CEliminate passwords entirely and rely solely on MFA with a mobile authenticator app.
   • DShorten the rotation period to 30 days and implement MFA.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A small business uses a cloud-based application that supports password authentication only. The owner wants to add a second factor without purchasing additional hardware or requiring users to install a separate app. Which option is the most practical way to implement multifactor authentication under these constraints?

   • AIssue hardware tokens to each employee that generate a rotating six-digit code.
   • BRequire users to answer a set of personal security questions after entering their password.
   • CSend a one-time passcode to the user's registered mobile phone via SMS after the password is entered.
   • DAsk users to enter a biometric fingerprint on their laptop after typing the password.
   Reveal Solution Discussion Select an answer first