5.4 Describe Security Password Policy Elements, Such as Management, Complexity, and Password Alternatives (multifactor Authentication, Certificates, and Biometrics) 200-301 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company wants to implement multifactor authentication for remote VPN access. Employees have company-issued laptops with built-in fingerprint readers and smart card readers. The security team wants to use two different authentication factors. Which combination satisfies the requirement for multifactor authentication?

   • AA password and a security question answer.
   • BA username and a password.
   • CA smart card (something you have) and a PIN (something you know).
   • DA fingerprint scan and a facial recognition scan.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which password is the most complex according to typical password complexity requirements?

   • AK7#mP2!vQ9@xR4
   • BTr0ub4dor&3
   • CP@ssw0rd
   • DCorrectHorseBatteryStaple
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company's security policy requires that passwords be changed every 90 days. An administrator notices that many users simply append a number to their previous password (e.g., 'Summer2024' becomes 'Summer2025'). Which additional policy element would most directly discourage this behavior?

   • APassword history that prevents reuse of the last 10 passwords.
   • BPassword complexity requiring at least one special character.
   • CPassword similarity check that rejects passwords differing from previous ones by only a few characters.
   • DMinimum password age of 1 day.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary purpose of a digital certificate in authentication?

   • ATo replace firewalls in network security
   • BTo encrypt all network traffic
   • CTo store a user's password securely
   • DTo bind a public key to an identity
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   An organization wants to eliminate passwords for accessing internal web applications. Users have company-issued laptops that are joined to the corporate domain. The security team wants a passwordless solution that uses a cryptographic credential stored on the device. Which approach should they implement?

   • AUse a biometric fingerprint reader on the laptop without any certificate.
   • BUse client certificates issued by the corporate CA and mapped to user accounts.
   • CUse a shared secret stored in the browser's password manager.
   • DImplement a one-time password (OTP) sent via email for each login.
   Reveal Solution Discussion Select an answer first