Password Cracking Countermeasures EHE Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is considering implementing MFA for all employees. The help desk is concerned about an increase in support tickets from users who have trouble with the new process. Which MFA deployment strategy minimizes user friction while maintaining strong security?

   • ARoll out MFA in phases, starting with high-risk accounts, and provide training and a self-service enrollment portal.
   • BAllow users to opt out of MFA if they find it inconvenient.
   • CUse SMS-based one-time codes because users are familiar with them.
   • DRequire MFA for all users immediately, with no exceptions.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An organization wants to reduce the risk of password reuse without burdening users. They are considering a password manager. Which additional measure is essential to ensure the password manager itself does not become a single point of failure?

   • AEnable MFA on the password manager account.
   • BStore the password manager database on a local file server with restricted access.
   • CRequire users to change their master password every 60 days.
   • DUse a long passphrase for the master password and write it down in a secure location.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How does multi-factor authentication (MFA) reduce the risk of unauthorized access even if a password is stolen?

   • AIt blocks all login attempts from unknown IP addresses
   • BIt requires an additional verification factor that the attacker does not possess
   • CIt encrypts the password so that it cannot be used by an attacker
   • DIt changes the password automatically after each login
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security team is designing a password policy for a system that stores highly sensitive data. The team must balance the risk of offline cracking against the reality that users will reuse passwords if they are too hard to remember. Which policy is most likely to achieve the best balance?

   • ARequire 8-character passwords with maximum complexity and force rotation every 30 days.
   • BRequire 12-character passwords and force rotation every 90 days, but prohibit password managers.
   • CRequire 20-character random passwords and store them in a central spreadsheet for users to copy.
   • DRequire 16-character passphrases, allow the use of a password manager, and do not force rotation unless a breach is suspected.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company with 500 employees is moving to a single sign-on (SSO) platform. The security team wants to reduce the risk of credential stuffing attacks against the SSO portal. Which combination of measures is most effective?

   • AEnforce MFA on the SSO portal and use a password manager to generate unique passwords for each employee's SSO account.
   • BEnable account lockout after 5 failed attempts and log all login attempts.
   • CUse a CAPTCHA on the login page and block IP addresses after 10 failed attempts.
   • DRequire a 10-character password and change it every 90 days.
   Reveal Solution Discussion Select an answer first