nerdexam
CompTIA

220-802 · Question #516

Which of the following is a best practice when securing passwords for a desktop? (Select TWO).

The correct answer is B. Place in an encrypted file D. Passwords should be memorized. Encrypting stored passwords and memorizing them are the two accepted best practices, as they eliminate plaintext exposure and reduce the attack surface introduced by external storage media or insecure protocols.

Hardware

Question

Which of the following is a best practice when securing passwords for a desktop? (Select TWO).

Options

  • AStore on a flash drive
  • BPlace in an encrypted file
  • CPlace in a zip file
  • DPasswords should be memorized
  • EStore on an FTP

How the community answered

(26 responses)
  • B
    88% (23)
  • C
    8% (2)
  • E
    4% (1)

Why each option

Encrypting stored passwords and memorizing them are the two accepted best practices, as they eliminate plaintext exposure and reduce the attack surface introduced by external storage media or insecure protocols.

AStore on a flash drive

Flash drives are unencrypted by default and can be physically lost, stolen, or accessed by anyone who finds them, directly exposing all stored credentials.

BPlace in an encrypted fileCorrect

Storing passwords in an encrypted file protects credentials with strong cryptographic algorithms so that even if the file is accessed by an unauthorized party, the plaintext remains unrecoverable without the correct key or passphrase.

CPlace in a zip file

Standard ZIP encryption (ZipCrypto) uses a weak algorithm that is easily cracked with readily available tools, providing no meaningful protection for sensitive passwords.

DPasswords should be memorizedCorrect

Memorizing passwords removes any physical or digital artifact that could be stolen, intercepted, or lost, making it the most secure storage method when the complexity and quantity of passwords permit it.

EStore on an FTP

FTP transmits data in cleartext over the network, meaning credentials stored on or transferred via FTP can be trivially captured through packet sniffing.

Concept tested: Secure password storage and handling best practices

Source: https://pages.nist.gov/800-63-3/sp800-63b.html

Topics

#password management#credential storage#encryption#security best practices

Community Discussion

No community discussion yet for this question.

Full 220-802 Practice