ITF - Quiz 14.5 - Password Security and Management

What is one vulnerability of using passwords for authentication?

• Passwords can be compromised through social engineering

• Passwords can be compromised by capturing password packets during transmission

• Passwords can be compromised through password cracking techniques

• All of the above

Which password cracking technique systematically tests every possible combination to match the hash?

• Dictionary Attack

• Brute Force Attack

• Social Engineering

• Phishing

What is the recommended password length for ordinary user accounts?

• 6-8 characters

• 9-12 characters

• 14-16 characters

• 18-20 characters

How can password complexity be enhanced?

• Using single words or obvious phrases

• Mixing upper and lower case characters

• Avoiding numerals and punctuation

• Sharing passwords with others

What is the best practice for password memorability?

• Using short and simple passwords

• Writing down passwords

• Using longer phrases with symbols and numerals

• Frequent password resets

What should you never do with your passwords?

• Write them down

• Share them with others

• Reuse them across different services

• All of the above

What is the purpose of password expiration?

• To make passwords more memorable

• To enforce frequent password resets

• To prevent password cracking

• To encourage password reuse

What is the recommended practice for password reuse?

• Encourage users to reuse passwords across different services

• Educate users on good password management practices

• Disallow password reuse completely

• None of the above

What is the purpose of password managers and fillers?

• To securely store passwords for multiple accounts

• To generate weak and easily guessable passwords

• To share passwords with others

• To discourage password resets

What is the importance of protecting password reset mechanisms?

• To prevent users from resetting their passwords

• To ensure malicious exploitation of reset mechanisms

• To maintain the security of user accounts

• To discourage the use of alternative contact methods