Back to Identity and Access Management

Password Management

5 minutes 5 Questions

Password management is a systematic process of creating, storing, and maintaining passwords securely in an organization. It ensures that users adhere to security best practices when creating and managing their password credentials. Proper password management involves implementing password policies,…

Test mode:
Start practice test
CompTIA Security+ - Password Management Example Questions

Test your knowledge of Password Management

Question 1

A security administrator has implemented a new password policy requiring a minimum of 16 characters. Despite this policy, a recent audit identified several accounts with breached passwords. What should the organization do to further enhance password security?

Correct Answer: Implement multi-factor authentication

Multi-factor authentication adds an additional layer of security beyond just a password, making it more difficult for unauthorized access, even if the password is compromised. Increasing password length or complexity or forcing more frequent changes may not necessarily deter attackers who already know the current passwords.

Question 2

An organization's password policy requires a minimum of 8 characters in length, at least one uppercase and one lowercase character, and at least one special character. However, helpdesk reports show frequent password reset requests due to users forgetting their passwords. What is the best solution to this problem?

Correct Answer: Encourage users to create mnemonic passwords

Mnemonic passwords encourage users to create passwords based on a pattern or phrase they can easily remember. This can help alleviate users forgetting passwords while still maintaining strong password requirements. Other options either do not address the issue or could negatively impact security.

Question 3

A system admin has implemented a new password policy with minimum password length of 12 characters, one uppercase, one lowercase, and a special character requirement. Users complain about the difficulty of remembering it. What is the best solution to ensure security while making it user-friendly?

Correct Answer: Implement a passphrase policy

A passphrase policy can increase password security by encouraging users to create long, memorable phrases rather than random complex characters. Reducing character requirements or removing other requirements weakens the password policy. Incremental password changes do not address the users' issue, while removing password expiration potentially increases risk.

More Password Management questions
14 questions (total)
Start 14 question test