A company's password policy requires users to change their passwords every 90 days. An employee, trying to remember their new password, changes it to a variation of their old password, such as 'Summer2023!' to 'Summer2024!'. Which additional policy would most effectively prevent this practice?

Require multi-factor authentication for all accounts.

Enforce a password history that remembers the last 10 passwords and prevents reuse.

Require passwords to be at least 15 characters long.

Use a password blocklist that includes common variations of previous passwords.

A company's security policy requires employees to create passwords that are difficult for attackers to guess. An employee asks why they cannot use a short password like 'Tr0ub4dor!' and instead must use a longer passphrase. Which statement best explains the security benefit of the longer passphrase?

Longer passwords have more possible combinations, making them exponentially harder to crack with brute-force attacks.

Longer passwords are harder to remember, which prevents users from writing them down.

Longer passwords are required by law for all business accounts.

Longer passwords are automatically stored in a password manager, so they are safer.

A company's IT policy requires employees to change their passwords every 60 days and to not reuse any of their previous 10 passwords. An employee asks why they must change their password so often. Which response best explains the primary security benefit of this policy?

It reduces the risk of phishing attacks by making passwords harder to remember.

It ensures that passwords are always complex and difficult to guess.

It limits the window of opportunity for an attacker who has stolen a password to use it.

It prevents users from using the same password for multiple accounts.

Which of the following is a security consideration for password recovery?

Sending the new password in a plain text email

Allowing unlimited recovery attempts without verification

Verifying the user's identity before allowing a password reset

Using the user's birth date as the only verification method

CompTIATech+

Domain 6Objective 3

Password Practices FC0-U71 Practice Questions (Page 1)

Part of the Security domain, which accounts for 19% of the FC0-U71 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

19%of the exam

Questions 1–5

1foundation · easy
Which password is the strongest against a brute-force attack?
Select an answer first
2application · medium
A company's password policy requires users to change their passwords every 90 days. An employee, trying to remember their new password, changes it to a variation of their old password, such as 'Summer2023!' to 'Summer2024!'. Which additional policy would most effectively prevent this practice?
Select an answer first
3application · medium
A company's security policy requires employees to create passwords that are difficult for attackers to guess. An employee asks why they cannot use a short password like 'Tr0ub4dor!' and instead must use a longer passphrase. Which statement best explains the security benefit of the longer passphrase?
Select an answer first
4application · medium
A company's IT policy requires employees to change their passwords every 60 days and to not reuse any of their previous 10 passwords. An employee asks why they must change their password so often. Which response best explains the primary security benefit of this policy?
Select an answer first
5foundation · easy
Which of the following is a security consideration for password recovery?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to FC0-U71

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “FC0-U71” is a trademark of its owner, used for identification only.

Password Practices FC0-U71 Practice Questions (Page 1)

Questions 1–5

Which password is the strongest against a brute-force attack?

A company's password policy requires users to change their passwords every 90 days. An employee, trying to remember their new password, changes it to a variation of their old password, such as 'Summer2023!' to 'Summer2024!'. Which additional policy would most effectively prevent this practice?

A company's IT policy requires employees to change their passwords every 60 days and to not reuse any of their previous 10 passwords. An employee asks why they must change their password so often. Which response best explains the primary security benefit of this policy?

Which of the following is a security consideration for password recovery?

Keep studying — Security