Account Management GCCC Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Why do organizations implement account lockout policies?

   • ATo prevent brute-force attacks by limiting the number of failed login attempts
   • BTo ensure that accounts are reviewed regularly
   • CTo make it easier for users to remember their passwords
   • DTo allow users to change their passwords more frequently
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is an example of an authentication policy?

   • AGranting users access to files based on their department
   • BReviewing user accounts quarterly
   • CDisabling accounts after an employee leaves
   • DRequiring passwords to be at least 12 characters long
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the recommended action when an employee leaves the organization?

   • ALeave the account active in case the employee returns
   • BChange the account password and keep it active
   • CDisable or remove the employee's account promptly
   • DDelete the account only after a year of inactivity
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security analyst notices that a privileged account is logging in at unusual hours and performing large data exports. The account belongs to a database administrator. What is the most appropriate first step?

   • ADisable the account immediately and investigate the activity.
   • BChange the password and send an email to the administrator asking if they were working.
   • CIgnore the activity because the account is privileged and the user may be working late.
   • DIncrease the logging level and wait for more evidence before acting.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the first step in securely recovering a compromised account?

   • ADisable all logging to prevent further data collection
   • BDelete the account and create a new one
   • CImmediately reset the password to a temporary value
   • DVerify the user's identity through a secure process
   Reveal Solution Discussion Select an answer first