Password Practices: Length, Complexity, Privacy, Reuse, and Password Managers. IT-FUNDAMENTALS-ITF-CERTIFICATION Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An employee is working remotely and receives a phone call from someone claiming to be IT support. The caller asks for the employee's password to 'verify the account'. What should the employee do?

   • AProvide the password since the caller claims to be IT support.
   • BAsk the caller to call back later and then provide the password.
   • CPolitely decline and report the call to the actual IT department.
   • DProvide the password but only after asking for the caller's name.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A user shares their streaming service password with a friend. Later, they notice unauthorized purchases on their account. What is the most likely cause?

   • AThe password was too short and was guessed by a hacker.
   • BThe streaming service was breached by a hacker.
   • CThe friend shared the password with others, leading to unauthorized access.
   • DThe streaming service automatically changed the password.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A website requires a password with at least 8 characters. Which of the following passwords is the strongest?

   • A1234567890
   • BP@ssw0rd1
   • CCorrectHorseBatteryStaple
   • Dabcdefghij
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A user has a password manager and uses it to generate a unique 16-character password for each site. However, they are concerned about the master password being stolen. What is the most effective way to protect the password vault?

   • AStore the master password in a note on the phone.
   • BEnable two-factor authentication on the password manager account.
   • CShare the master password with a trusted friend.
   • DUse a shorter master password that is easier to remember.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A user receives an email that appears to be from their bank, asking them to 'verify' their password by clicking a link. What should the user do?

   • AClick the link but do not enter the password.
   • BReply to the email with the password.
   • CDo not click the link and report the email as phishing.
   • DClick the link and enter the password to verify the account.
   Reveal Solution Discussion Select an answer first