Quiz on Password Policies and MFA

1. Which of the following is considered a strong password policy?

• A. Minimum password length of 6 characters
  

• B. Password must include uppercase, lowercase, number, and special character
  

• C. Passwords never expire
  

• D. Allowing the use of common passwords like "password123"

What is the purpose of Multi-Factor Authentication (MFA)?

• A. To simplify user login processes
  

• B. To reduce server load
  

• C. To provide additional security by requiring more than one form of verification
  

• D. To allow password reuse

What is a common benefit of using a password manager?

• D. It eliminates the need for passwords altogether

• C. It stores passwords in plain text for easy access
  

• B. It allows users to remember all their passwords easily
  

• A. It generates random passwords for each account
  

2. Which of the following is a sign of a phishing attempt?

• A. An email from a known contact asking for personal information
  

• D. All of the above

• B. A message with poor grammar and spelling errors
  

• C. A request for urgent action regarding your account
  

What is the primary function of a firewall in network security?

• A. To encrypt data transmitted over the network
  

• B. To monitor and control incoming and outgoing network traffic
  

• C. To provide a backup for data storage
  

• D. To manage user access to applications

Which statement best describes the benefit of enforcing a password expiration policy?

• A. It reduces user complaints about forgotten passwords
  

• B. It ensures users change their password regularly, lowering long-term risk
  

• C. It guarantees account recovery is always possible
  

• D. It eliminates the need for MFA

Which policy helps prevent password guessing attacks?

• A. Allow unlimited login attempts
  

• B. Enable account lockout after failed attempts
  

• C. Disable password history
  

• D. Allow single-factor authentication

What is the main advantage of using two-factor authentication (2FA) over a standard password?

• A. It requires only a password and username
  

• D. It simplifies the login process

• B. It adds an extra layer of security by requiring a second form of verification
  

• C. It eliminates the need for a password altogether
  

Which of the following practices can enhance password security?

• A. Using the same password across multiple sites
  

• B. Regularly updating passwords and avoiding common phrases
  

• D. Sharing passwords with trusted friends

• C. Writing passwords down and keeping them in an accessible place
  

Which of these is the best example of a knowledge factor in MFA?

• A) Retina scan
  

• B) SMS code
  

• C) Security question answer
  

• D) Mobile push notification