Security Policy Management Quiz

Which of the following passwords is the most complex?

• T$7C52WL4SU

• GdL3tU8wxYz

• @TxBL$nW@Xt

• G$L3tU8wY@z

An account policy setting that forces users to come up with a new password every time they are required to change their old password is called:

• Password reuse

• Multi-factor authentication

• Password history

• Password complexity

Which of the account policy settings prevents users from reusing old passwords?

• Password expiration

• Password history

• Password length

• Password complexity

Which of the following account management security measures narrows down a user's computer access to specified hours?

• Principle of least privilege

• Time-Based One-Time Password (TOTP)

• Kerberos ticket

• Login time restrictions

Which of the account policies listed below provides a countermeasure against malicious users attempting to determine an account password by trial and error?

• Group policy

• Password history

Which of the following answers refer(s) to (an) example(s) of physical authentication token(s)? (Select all that apply)

• RFID badge

• Password key

• Password vault

• Key fob

• Smart card

The term "Password vault" refers to a credential manager program that stores usernames and passwords in an encrypted form. Password vault requires a single master password for accessing a number of different passwords used for different websites or services.

• True

• False

During a password reminder procedure, the system asks a security question that covers personal details known only to the user (e.g., user's favorite holiday destination). This type of authentication method is an example of:

• SAE

• KBA

• IdP

• PII

The difference between static KBA and dynamic KBA is that in the case of static KBA, the authentication process relies on pre-determined security questions chosen by the user during account creation. Dynamic KBA, however, does not require user input and relies on data sources for authentication.

• True

• False

Challenge Handshake Authentication Protocol (CHAP) is a remote access authentication protocol that periodically re-authenticates the client at random intervals to prevent session hijacking.

• True

• False