CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ341

Risk Response and Reporting

Which of the following controls would BEST reduce exposure when a password has been compromised?

  • A Passwords have format restrictions
  • B Passwords are masked
  • C Password changes are mandated
  • D Passwords are encrypted
Explanation

Mandated password changes reduce the period during which a compromised password can be used, limiting the exposure caused by its compromise.

Community Discussion

No comments yet. Be the first to start the discussion!