FC0-U61 · Question #95
Which of the following would BEST be described as password best practices? (Select THREE).
The correct answer is A. Use of long passwords C. Limiting password reuse E. Use of special characters. Effective password best practices include creating long passwords, limiting their reuse across multiple accounts, and incorporating special characters to enhance security.
Question
Which of the following would BEST be described as password best practices? (Select THREE).
Options
- AUse of long passwords
- BSharing passwords with a trusted source
- CLimiting password reuse
- DKeeping default passwords
- EUse of special characters
- FWriting down difficult passwords
How the community answered
(25 responses)- A92% (23)
- D4% (1)
- F4% (1)
Why each option
Effective password best practices include creating long passwords, limiting their reuse across multiple accounts, and incorporating special characters to enhance security.
Long passwords, typically 12 characters or more, provide a larger keyspace, making them significantly harder for attackers to crack through brute-force methods compared to shorter passwords.
Sharing passwords, even with a trusted source, introduces a significant security risk as it expands the attack surface and can lead to unintended exposure or compromise.
Limiting password reuse is essential because if one account is compromised, using unique passwords for other services prevents a "credential stuffing" attack where attackers use the stolen credentials to access other accounts.
Keeping default passwords is a severe security vulnerability because default credentials are often publicly known or easily guessable, providing an open door for unauthorized access.
The use of special characters (e.g., !, @, #) along with uppercase letters, lowercase letters, and numbers increases the complexity and entropy of a password, making it more resistant to cracking attempts.
Writing down difficult passwords, especially on physical notes or unencrypted digital documents, creates a single point of failure and makes them vulnerable to physical theft or unauthorized discovery.
Concept tested: Password best practices
Source: https://www.cisa.gov/sites/default/files/publications/Federal-Cybersecurity-Best-Practices-Guide.pdf
Topics
Community Discussion
No community discussion yet for this question.