Password Practices FC0-U71 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An employee at a marketing firm is responsible for managing dozens of online accounts for social media, advertising, and project management tools. They currently use the same simple password for all accounts because they cannot remember many different passwords. Which solution would best address the security risk while maintaining usability?

   • AWrite the passwords in a notebook kept in the employee's desk drawer.
   • BUse a longer version of the same password for all accounts, such as 'MyFavoriteColorIsBlue123!'.
   • CAsk the IT department to disable password changes so the employee can keep the same password.
   • DUse a password manager to generate and store unique, complex passwords for each account.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A small business owner wants to improve security for employee access to the company's cloud-based accounting system. Currently, employees use only a username and a password. The owner is concerned about the risk of stolen passwords. Which additional control would provide the most significant security improvement?

   • ASet passwords to expire every 30 days and prevent reuse of the last five passwords.
   • BImplement multi-factor authentication (MFA) that requires a one-time code from an authenticator app in addition to the password.
   • CRequire passwords to be at least 12 characters long with a mix of uppercase, lowercase, numbers, and symbols.
   • DProvide each employee with a password manager to generate and store unique passwords for the accounting system.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company's password recovery process for a critical admin account uses only security questions. A security audit has identified this as a risk. The company wants to improve the recovery process without causing excessive friction for legitimate users. Which approach provides the best balance of security and usability?

   • AAllow the user to reset the password by answering a series of personal questions, such as their first pet's name.
   • BImplement a multi-step verification process that includes a one-time code sent to a registered device and a temporary access code generated by an authenticator app.
   • CRequire the user to visit the IT department in person with a photo ID.
   • DRequire the user to provide their employee ID and a copy of their driver's license via email.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the main benefit of requiring users to change their passwords regularly?

   • AIt ensures that users never forget their passwords
   • BIt eliminates the need for multi-factor authentication
   • CIt reduces the window of opportunity for an attacker who has already obtained a password
   • DIt makes passwords easier to remember
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has a shared account for a critical application. Several employees need access, but the company is concerned about the risk of shared passwords. Which approach provides the best security while maintaining usability?

   • AKeep the shared password but require all employees to use a password manager to store it.
   • BUse a password manager's secure sharing feature to grant access to the shared account without revealing the password.
   • CChange the shared password every week and communicate it via email.
   • DCreate individual accounts for each employee and disable the shared account.
   Reveal Solution Discussion Select an answer first