CSCU Password Security and Management 2

Question 1

What is multi-factor authentication (MFA)?

Accepted Answer

Requiring two or more verification factors to access an account

Answer

Using multiple passwords for one account

Answer

Having multiple accounts for security

Answer

Logging in from multiple devices simultaneously

Question 2

Which of the following is an example of a 'something you have' authentication factor?

Accepted Answer

A one-time code sent to your phone

Answer

Your password

Answer

Your fingerprint

Answer

Your username

Question 3

What is a dictionary attack in the context of passwords?

Accepted Answer

An automated attempt to crack passwords using a list of common words and phrases

Answer

An attack using definitions from a dictionary website

Answer

A social engineering technique involving technical jargon

Answer

An attack on spell-check software

Question 4

How often should passwords be changed for sensitive accounts?

Accepted Answer

Only when there is a suspected breach or compromise

Answer

Never, once set it's secure

Answer

Every day

Answer

Every year regardless of circumstances

Question 5

What is a brute-force attack on a password?

Accepted Answer

Trying every possible combination of characters until the correct password is found

Answer

Physically threatening someone to reveal their password

Answer

Tricking users into entering passwords on fake websites

Answer

Exploiting software bugs to bypass authentication

Question 6

What does it mean when a website stores passwords as 'hashed'?

Accepted Answer

Passwords are converted into a fixed-length string that cannot be reversed to the original

Answer

Passwords are stored in plain text for easy retrieval

Answer

Passwords are encrypted with a key held by the company

Answer

Passwords are deleted after first login