CSCU Password Security and Management 3

Question 1

What is credential stuffing?

Accepted Answer

Using stolen username/password pairs from one breach to try to access other services

Answer

Adding extra characters to make a password longer

Answer

Storing credentials in browser autofill

Answer

Filling out long registration forms automatically

Question 2

Which password storage method is considered LEAST secure?

Accepted Answer

Writing in a plain text file on your desktop

Answer

Storing in a reputable password manager

Answer

Hashing with bcrypt

Answer

Using a hardware security key

Question 3

What is the purpose of a 'salt' added to a hashed password?

Accepted Answer

To add a random value that prevents two identical passwords from producing the same hash

Answer

To make the password easier to remember

Answer

To encrypt the hash with an additional key

Answer

To slow down the login process for security

Question 4

What should you do before entering your password on a website?

Accepted Answer

Check that the URL uses HTTPS and the domain is correct

Answer

Clear your browser cache

Answer

Disable your antivirus temporarily

Answer

Switch to incognito mode only

Question 5

What is a rainbow table attack?

Accepted Answer

Using precomputed hash values to reverse-lookup hashed passwords quickly

Answer

An attack that uses colorful visual decoys to distract security teams

Answer

A technique that overwhelms login pages with traffic

Answer

Exploiting misconfigured rainbow routing in networks

Question 6

Which practice BEST protects you when using public Wi-Fi and entering passwords?

Accepted Answer

Connecting through a VPN before logging in

Answer

Using a very long password

Answer

Disabling your firewall

Answer

Using the same password you use at home