Cyber EOP - Password Policies By Mr. B

What is the minimum length of a password according to the policy?

• 8 characters

• 10 characters

• 12 characters

• 15 characters

Answer explanation

The password policy specifies a minimum length of 10 characters. This ensures a stronger security standard compared to shorter passwords, making '10 characters' the correct choice.

How many special characters must a password contain?

• At least three

• At least two

• At least one

• At least four

Answer explanation

A secure password should contain at least two special characters to enhance its strength. This requirement helps protect against unauthorized access, making 'at least two' the correct choice.

What is the maximum length of a password as per the policy?

• 15 characters

• 20 characters

• 30 characters

• 25 characters

Answer explanation

The maximum length of a password according to the policy is 20 characters. This is the correct choice as it meets the security requirements while allowing sufficient complexity.

How often must a user change their password?

• Every 10 days

• Every 5 days

• Every 30 days

• Every 15 days

Answer explanation

Users must change their password every 10 days to maintain security. This frequency helps reduce the risk of unauthorized access and ensures that accounts remain protected.

What happens if a user fails to provide a valid password?

• The system locks the account

• The system prompts for corrections

• The user is logged out

• The password is reset

Answer explanation

If a user fails to provide a valid password, the system prompts for corrections, allowing the user to re-enter their password. This ensures users can attempt to log in without being locked out or logged out.

How many passwords can a user keep in history?

• 10 passwords

• Unlimited

• 5 passwords

• 1 password

Answer explanation

The correct answer is 10 passwords, as this is the standard limit for password history in many systems. This prevents users from reusing their recent passwords, enhancing security.

What must a user do during their initial log in?

• Set security questions

• Change their username

• Change the default password

• Log in without changes

Answer explanation

During initial log in, users must change the default password to enhance security. This step is crucial to protect their account from unauthorized access.

How many consecutive failed login attempts are allowed before locking the account?

• 3 attempts

• 2 attempts

• 1 attempt

• 4 attempts

Answer explanation

The correct answer is 3 attempts, as most systems typically allow three consecutive failed login attempts before locking the account to prevent unauthorized access.

Can multiple user accounts share the same password policy?

• No

• Yes

• Only if they are in the same group

• Only for administrators

Answer explanation

Yes, multiple user accounts can share the same password policy. This allows for consistent security measures across different accounts, simplifying management and ensuring that all users adhere to the same standards.

What is the consequence of failing to log in correctly three times?

• User must wait 24 hours

• User can log in from any computer

• Account is permanently locked

• User is logged out

Answer explanation

Failing to log in correctly three times typically results in the user being temporarily locked out, but they can still log in from any computer once the lockout period is over.