220-802 · Question #516
Which of the following is a best practice when securing passwords for a desktop? (Select TWO).
The correct answer is B. Place in an encrypted file D. Passwords should be memorized. Encrypting stored passwords and memorizing them are the two accepted best practices, as they eliminate plaintext exposure and reduce the attack surface introduced by external storage media or insecure protocols.
Question
Which of the following is a best practice when securing passwords for a desktop? (Select TWO).
Options
- AStore on a flash drive
- BPlace in an encrypted file
- CPlace in a zip file
- DPasswords should be memorized
- EStore on an FTP
How the community answered
(26 responses)- B88% (23)
- C8% (2)
- E4% (1)
Why each option
Encrypting stored passwords and memorizing them are the two accepted best practices, as they eliminate plaintext exposure and reduce the attack surface introduced by external storage media or insecure protocols.
Flash drives are unencrypted by default and can be physically lost, stolen, or accessed by anyone who finds them, directly exposing all stored credentials.
Storing passwords in an encrypted file protects credentials with strong cryptographic algorithms so that even if the file is accessed by an unauthorized party, the plaintext remains unrecoverable without the correct key or passphrase.
Standard ZIP encryption (ZipCrypto) uses a weak algorithm that is easily cracked with readily available tools, providing no meaningful protection for sensitive passwords.
Memorizing passwords removes any physical or digital artifact that could be stolen, intercepted, or lost, making it the most secure storage method when the complexity and quantity of passwords permit it.
FTP transmits data in cleartext over the network, meaning credentials stored on or transferred via FTP can be trivially captured through packet sniffing.
Concept tested: Secure password storage and handling best practices
Source: https://pages.nist.gov/800-63-3/sp800-63b.html
Topics
Community Discussion
No community discussion yet for this question.