Security+ 701 PBQ 14

You are provided with the following passwords:

Passwords:

1. Password123
2. Tr3eH!$vQ9wsfb
3. *&ThemostimporantthinG13
4. sunshine2021
5. Y2!roudi672

Task: Rank the passwords from most secure to least secure.

Your company needs to store user passwords securely. You are given the following methods:

Options:

1. Plaintext storage
2. Hashing with MD5
3. Hashing with SHA-1 and salting
4. Hashing with SHA-256 and salting
5. Hashing with AES 256 and salting
6. Reversible encryption

Task: Select the most secure method for storing passwords.

Your organization is implementing a new password policy. The organization wants to prioritize security without causing disruptions to business operations.

You are given the following options:

Options:

1. Minimum length of 14 characters, no complexity requirements, change every 90 days
2. Minimum length of 14 characters, include uppercase, lowercase, numbers, and special characters, change every 180 days
3. Minimum length of 8 characters, include uppercase, lowercase, numbers, and special characters, change every 60 days
4. Minimum length of 15 characters, no change requirement

Task: Choose the best combination.

Your organization has just recovered from a cyber attack where a hacker recovered a list of stored password hashes for employee accounts.  You have had everyone in the organization change their password.  You now need to enhance the security of your organization’s authentication process.   You are given the following options:

Options:

1. Password only
2. Password and security questions
3. Password and SMS-based OTP (One-Time Password)
4. Password and a hardware token
5. Iris scanner and hardware token
6. PIV card and pin
7. Password and TOTP software token

Task: Select the options that would enhance the security of the login process

Management has informed you that your department will be receiving zero additional funding to implement the security enhancement.  You will not have any additional funding to spend.  Your options are the same:

Options:

1. Password only
2. Password and security questions
3. Password and SMS-based OTP (One-Time Password)
4. Password and a hardware token
5. Iris scanner and hardware token
6. PIV card and pin
7. Password and TOTP software token

Task: Select the option that would be the most cost efficient while still providing good security.