CSCU Password Security and Management 2

Question 1

What is multi-factor authentication (MFA)?

Accepted Answer

Requiring two or more verification factors to access an account

Answer

MFA requires users to provide two or more distinct types of evidence (factors) before granting access, making unauthorized logins much harder.

Question 2

Which of the following is an example of a 'something you have' authentication factor?

Accepted Answer

A one-time code sent to your phone

Answer

A one-time code sent to your phone represents the 'something you have' factor because it requires physical possession of your device.

Question 3

What is a dictionary attack in the context of passwords?

Accepted Answer

An automated attempt to crack passwords using a list of common words and phrases

Answer

A dictionary attack cycles through a list of common words, phrases, and known passwords to guess a user's credential.

Question 4

How often should passwords be changed for sensitive accounts?

Accepted Answer

Only when there is a suspected breach or compromise

Answer

Current NIST guidelines recommend changing passwords only when there is evidence of compromise, rather than on a fixed schedule that leads to weak incremental changes.

Question 5

What is a brute-force attack on a password?

Accepted Answer

Trying every possible combination of characters until the correct password is found

Answer

A brute-force attack systematically tests every possible character combination until the correct password is discovered.

CSCU - Certified Secure Computer User Practice Test

CSCU - Certified Secure Computer User Practice Test

CSCU Password Security and Management 2