What is a critical aspect of defending against password cracking?

Question

Options

• AUsing common passwords across systems
• BRegular user training on secure password creation
• CAllowing unlimited login attempts
• DAvoiding the use of multi-factor authentication

• A
  7% (2)
• B
  90% (26)
• D
  3% (1)

Explanation

Regular user training on secure password creation (B) is correct because human behavior is the weakest link in password security - users who understand how to create strong, unique passwords actively reduce the attack surface for dictionary attacks, brute force, and credential stuffing.

Why the distractors fail:

• A - Reusing common passwords across systems is exactly what attackers exploit; a single breach compromises every account sharing that password.
• C - Unlimited login attempts enables brute force attacks; lockout policies and rate limiting are standard defenses.
• D - MFA is one of the most effective mitigations against cracked passwords - even if a password is compromised, a second factor blocks unauthorized access.

Memory tip: Think of the three pillars - train users, limit attempts, add factors. Option B is the only choice that strengthens all three indirectly by building a security-aware culture, while A, C, and D each remove a pillar entirely.

No community discussion yet for this question.