Which password practice is considered weak and increases security risk?

Using a password manager to generate and store passwords

Using a simple dictionary word like 'password123'

Using a passphrase of at least 15 characters

Using a different password for each account

Which strategy is an example of a technical control to mitigate risks from human behavior?

Creating a security policy that prohibits password sharing

Conducting regular security awareness training

Performing background checks on new hires

Implementing multi-factor authentication (MFA)

Certified Tester Security Tester

Domain 6Objective 1

The Impact of Human Behavior on Security Risks CT-SEC Practice Questions (Page 6)

Part of the Human Factors in Security Testing domain, which makes up ~14% of our current practice bank. ISTQB does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

Questions 26–28

26foundation · easy
Which type of insider threat involves an employee who unintentionally causes a security incident?
Select an answer first
27foundation · easy
Which password practice is considered weak and increases security risk?
Select an answer first
28foundation · easy
Which strategy is an example of a technical control to mitigate risks from human behavior?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CT-SEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-SEC” is a trademark of its owner, used for identification only.

The Impact of Human Behavior on Security Risks CT-SEC Practice Questions (Page 6)

Questions 26–28

Which type of insider threat involves an employee who unintentionally causes a security incident?

Which password practice is considered weak and increases security risk?

Which strategy is an example of a technical control to mitigate risks from human behavior?

Keep studying — Human Factors in Security Testing