FC0-U61 · Question #468
A user has been instructed to use unique passwords for accessing each system. Which of the following BEST describes the potential risk of using the same password?
The correct answer is B. Password compromise would allow access to all of the systems.. The greatest risk of using the same password for multiple systems is that a compromise of one system's password allows an attacker to gain access to all other systems using those identical credentials. This magnifies the impact of a single security breach.
Question
A user has been instructed to use unique passwords for accessing each system. Which of the following BEST describes the potential risk of using the same password?
Options
- AThe password might be easier for an attacker to guess.
- BPassword compromise would allow access to all of the systems.
- CSingle sign-on would be unable to function correctly.
- DSystems might reject the password based on different requirements.
How the community answered
(61 responses)- A2% (1)
- B93% (57)
- C2% (1)
- D3% (2)
Why each option
The greatest risk of using the same password for multiple systems is that a compromise of one system's password allows an attacker to gain access to all other systems using those identical credentials. This magnifies the impact of a single security breach.
While some passwords might be easier to guess regardless of reuse, the act of reusing a password does not inherently make that specific password easier to guess; the risk lies in the amplified impact once it is compromised.
Using the same password across multiple systems creates a critical vulnerability because if an attacker successfully obtains that password from one system (e.g., through a data breach or phishing), they can then attempt to use the identical credentials to log into all other systems the user accesses, leading to widespread unauthorized access and compromise. This is often referred to as 'credential stuffing.'
Single sign-on (SSO) systems are designed to allow users to log in once and access multiple systems without re-entering credentials; using unique passwords on individual systems does not prevent SSO from functioning, as SSO relies on a centralized authentication mechanism.
Systems may reject passwords based on their own complexity or history requirements, but this is a separate issue from the security risk of reusing an identical password across different systems, which primarily concerns the impact of compromise.
Concept tested: Password reuse security risks
Source: https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/create-secure-passwords?view=o365-worldwide
Topics
Community Discussion
No community discussion yet for this question.