nerdexam
CompTIA

FC0-U61 · Question #468

A user has been instructed to use unique passwords for accessing each system. Which of the following BEST describes the potential risk of using the same password?

The correct answer is B. Password compromise would allow access to all of the systems.. The greatest risk of using the same password for multiple systems is that a compromise of one system's password allows an attacker to gain access to all other systems using those identical credentials. This magnifies the impact of a single security breach.

Security

Question

A user has been instructed to use unique passwords for accessing each system. Which of the following BEST describes the potential risk of using the same password?

Options

  • AThe password might be easier for an attacker to guess.
  • BPassword compromise would allow access to all of the systems.
  • CSingle sign-on would be unable to function correctly.
  • DSystems might reject the password based on different requirements.

How the community answered

(61 responses)
  • A
    2% (1)
  • B
    93% (57)
  • C
    2% (1)
  • D
    3% (2)

Why each option

The greatest risk of using the same password for multiple systems is that a compromise of one system's password allows an attacker to gain access to all other systems using those identical credentials. This magnifies the impact of a single security breach.

AThe password might be easier for an attacker to guess.

While some passwords might be easier to guess regardless of reuse, the act of reusing a password does not inherently make that specific password easier to guess; the risk lies in the amplified impact once it is compromised.

BPassword compromise would allow access to all of the systems.Correct

Using the same password across multiple systems creates a critical vulnerability because if an attacker successfully obtains that password from one system (e.g., through a data breach or phishing), they can then attempt to use the identical credentials to log into all other systems the user accesses, leading to widespread unauthorized access and compromise. This is often referred to as 'credential stuffing.'

CSingle sign-on would be unable to function correctly.

Single sign-on (SSO) systems are designed to allow users to log in once and access multiple systems without re-entering credentials; using unique passwords on individual systems does not prevent SSO from functioning, as SSO relies on a centralized authentication mechanism.

DSystems might reject the password based on different requirements.

Systems may reject passwords based on their own complexity or history requirements, but this is a separate issue from the security risk of reusing an identical password across different systems, which primarily concerns the impact of compromise.

Concept tested: Password reuse security risks

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/create-secure-passwords?view=o365-worldwide

Topics

#Password hygiene#Security risks#Credential reuse

Community Discussion

No community discussion yet for this question.

Full FC0-U61 Practice