5.4 Describe Security Password Policy Elements, Such as Management, Complexity, and Password Alternatives (multifactor Authentication, Certificates, and Biometrics) 200-301 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An organization wants to enable certificate-based authentication for its employees to access a web portal. The administrator has already deployed a public key infrastructure (PKI) and issued certificates to all employee devices. What additional configuration is required on the web portal to complete the authentication setup?

   • AConfigure the portal to trust the root CA certificate and to request and validate client certificates during the TLS handshake.
   • BInstall the same private key on every employee device so that the portal can recognize all certificates as valid.
   • CDisable password authentication on the portal and require users to enter their certificate serial number manually each time.
   • DEnsure the portal's own server certificate is signed by a public CA so that clients can verify the server's identity.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Why do password complexity policies typically require the use of multiple character types?

   • ATo ensure passwords are compatible with all systems
   • BTo make passwords easier to remember
   • CTo increase the number of possible combinations an attacker must try
   • DTo reduce the need for password rotation
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A hospital is implementing biometric authentication for staff access to medication dispensing cabinets. The system uses a fingerprint scanner. Which additional measure is most important to ensure the biometric system remains secure and usable?

   • AStore only a mathematical representation (template) of the fingerprint, not the raw image, and protect the template database.
   • BRequire staff to re-enroll their fingerprints every week to ensure the scanner always recognizes them.
   • CUse the same fingerprint template for all staff members to simplify the enrollment process.
   • DDisable all other authentication methods so that biometrics are the only way to access the cabinets.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary security benefit of using multifactor authentication?

   • AIt prevents all types of cyberattacks
   • BIt speeds up the authentication process for users
   • CIt eliminates the need for strong passwords
   • DIt reduces the risk of unauthorized access if one factor is compromised
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company is migrating to a new identity management system. The current password policy requires 8-character passwords with complexity, but a recent breach showed that many passwords were cracked using dictionary attacks. The security team wants to implement a more robust policy without causing excessive user frustration. They also need to comply with a regulation that requires passwords to be changed every 90 days. Which policy change is most effective?

   • AEliminate complexity requirements and rely solely on a 20-character minimum length.
   • BIncrease minimum length to 12 characters and enable a breach-checking service that blocks known compromised passwords.
   • CRequire at least 3 special characters and 2 numbers in addition to the current complexity.
   • DShorten the rotation period to 30 days to reduce the time a compromised password can be used.
   Reveal Solution Discussion Select an answer first