Password Practices: Length, Complexity, Privacy, Reuse, and Password Managers. IT-FUNDAMENTALS-ITF-CERTIFICATION Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A small business wants to enforce strong password practices for its five employees. They currently share a spreadsheet of passwords for various accounts. The owner wants a solution that is secure, easy to use, and does not require significant IT expertise. What is the best recommendation?

   • AImplement a password manager for the team and train employees to use unique, complex passwords.
   • BUse a simple password policy and change passwords every 30 days.
   • CRequire all employees to use the same complex password for all accounts.
   • DContinue using the spreadsheet but add a password to open it.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which benefit does a password manager provide that directly supports good password hygiene?

   • AIt sends your passwords to your email as a backup.
   • BIt remembers your passwords so you can use the same one everywhere.
   • CIt generates long, random passwords and stores them so you do not have to memorize them.
   • DIt automatically changes your passwords every day without your input.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A user receives a notification that their email password was found in a data breach. They use the same password for their online banking. What is the most important immediate action?

   • AWait to see if any unauthorized activity occurs.
   • BChange the password on the banking account and the email account to new, unique passwords.
   • CChange only the email password because the banking site is more secure.
   • DKeep the password but add a number to the end.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A user has a password manager and wants to create a new password for a high-security account. They have the option to use a 20-character random string or a 20-character passphrase of four random words. Which is generally considered more secure?

   • AThe passphrase is more secure because it is longer in practice.
   • BThe random string is more secure because it has higher entropy per character.
   • CThe passphrase is more secure because it is easier to remember.
   • DBoth are equally secure because they are the same length.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A user has a strong password for their work account. They want to use the same password for a personal shopping site to avoid remembering another one. What is the best advice?

   • AUse the same password because the shopping site is low-risk.
   • BUse the same password but add a number at the end.
   • CUse a shorter version of the work password.
   • DUse a different, unique password for the shopping site.
   Reveal Solution Discussion Select an answer first