nerdexam
(ISC)2

SSCP · Question #1179

A password audit consists of checking for ____________?

The correct answer is E. All of the items listed. A comprehensive password audit evaluates multiple factors, including minimum length, aging policies, overall strength, and the presence of blank passwords, to ensure robust security.

Submitted by akirajp· Apr 18, 2026Access Controls

Question

A password audit consists of checking for ____________?

Options

  • AMinimum password length
  • BPassword aging
  • CPassword Strength
  • DBlank Passwords
  • EAll of the items listed

How the community answered

(22 responses)
  • A
    5% (1)
  • C
    5% (1)
  • E
    91% (20)

Why each option

A comprehensive password audit evaluates multiple factors, including minimum length, aging policies, overall strength, and the presence of blank passwords, to ensure robust security.

AMinimum password length

Minimum password length is only one aspect of a robust password policy and audit, not the sole focus.

BPassword aging

Password aging is an important security control but represents only one component of a complete password audit.

CPassword Strength

Assessing password strength is crucial, but a full audit also includes policy enforcement and identification of problematic passwords.

DBlank Passwords

Detecting blank passwords is a critical security check, but a comprehensive audit covers a broader range of password-related issues.

EAll of the items listedCorrect

A thorough password audit encompasses checking for adherence to minimum password length requirements, verifying proper password aging policies are enforced, assessing the overall strength and complexity of passwords, and identifying any instances of blank or default passwords to minimize security vulnerabilities.

Concept tested: Password audit components

Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/password-policy/password-policy

Topics

#Password Audit#Password Policy#Access Control#Security Auditing

Community Discussion

No community discussion yet for this question.

Full SSCP Practice