Password Practices FC0-U71 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a primary risk of sharing passwords with coworkers?

   • AIt becomes difficult to determine who is responsible for actions taken on the account
   • BIt increases the complexity of the password
   • CIt speeds up the password recovery process
   • DIt makes the password easier to remember
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is planning to deploy a password manager to all employees. The security team is concerned about the risk of a single master password being compromised. Which additional control would best mitigate this risk?

   • ARequire the master password to be at least 20 characters long.
   • BEnforce multi-factor authentication (MFA) on the password manager account.
   • CRequire employees to change their master password every 30 days.
   • DStore the master password in a secure file on the employee's computer.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A team lead shares the login credentials for a shared project management account with a new team member via email so they can start working immediately. Which practice would best mitigate the security risk of this password sharing?

   • AAsk the new team member to change the password immediately after first login.
   • BUse a secure password-sharing feature in a password manager that grants access without revealing the password.
   • CSend the password in a separate email from the username to make it harder to intercept.
   • DChange the password to something simple that is easy for the new team member to remember.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the purpose of a password recovery process?

   • ATo share passwords with administrators
   • BTo automatically generate a new password for every account
   • CTo allow users to regain access to their accounts if they forget their passwords
   • DTo store passwords in plain text for easy retrieval
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A user attempts to reset their password for a corporate account. The system asks for a verification code sent to the user's mobile phone. The user reports they did not receive the code. Which step should the user take first?

   • AContact the IT help desk to verify identity and reset the password manually.
   • BWait a few minutes and request a new code.
   • CCheck that the phone number on file is correct and that the phone has signal.
   • DCheck the spam folder of their email account for the code.
   Reveal Solution Discussion Select an answer first