4.6 Password Security

Question 1

What is the primary goal when creating a password?

Answer 1

To create a password with an increased amount of entropy

Entropy describes how unpredictable a password might be.

Question 2

What characteristics should an ideal password contain?

Answer 2

Uppercase letters, lowercase letters, numbers, and special characters

This combination increases the complexity and security of the password.

Question 3

What is the recommended minimum length for a password?

Answer 3

At least eight characters

Password length requirements are increasing as processing speeds improve.

Question 4

How often do many systems require password changes?

Answer 4

Every 30, 60, or 90 days

Some critical systems may require changes as frequently as every 7 to 15 days.

Question 5

What happens if a password expires and is not changed?

Answer 5

The user will not be able to log in to that account.

Question 6

What is a recommended best practice regarding passwords for multiple accounts?

Answer 6

Use a different password for each account.

Question 7

What is the purpose of a password manager?

Answer 7

To store all of your passwords in one single database.

Question 8

What additional security measures do password managers often implement?

Answer 8

Encryption of stored information and multifactor authentication.

Question 9

What feature allows password managers to help create unique passwords?

Answer 9

Automatic password generation.

Question 10

True or False: Many people take full advantage of password managers.

Answer 10

False.

Question 11

What is a potential benefit of passwordless authentication?

Answer 11

It solves the problem of password reuse.

Question 12

How might you currently be using passwordless authentication?

Answer 12

Using face recognition to unlock a mobile phone.

Question 13

What is just-in-time permission?

Answer 13

Temporary administrative access granted for a limited time.

Question 14

What does just-in-time permission help mitigate?

Answer 14

The risk of an attacker gaining permanent administrator access.

Question 15

What is the role of a central clearinghouse in just-in-time permissions?

Answer 15

To allow or deny access based on set security policies.

Question 16

What type of credentials does the central clearinghouse manage?

Answer 16

Primary credentials for access to systems.

Question 17

What happens to temporary credentials after their use?

Answer 17

They can be deleted after the session is complete.

Question 18

Fill in the blank: The process of creating new temporary credentials based on primary credentials is called _______.

Answer 18

Just-in-time permissions.