Question 30
A company requires user passwords to withstand credential stuffing and offline guessing. Staff currently reuse an eight-character company-wide password. Which policy change directly improves the credential's security while still supporting normal account management?
Explanation
Correct Answer
Password length and uniqueness raise the cost of guessing and prevent one leaked credential from working across accounts. MFA adds a second factor against password theft, especially for privileged access. Use managed recovery and monitoring rather than forcing predictable shared rotations that encourage reuse.
Incorrect Answers
Complexity is only one password strength dimension, but eliminating unique identities and audit records reduces both prevention and accountability. The scenario needs individual strong credentials, ideally MFA, and traceable access. A shared unmonitored login makes unauthorized activity easier to hide.
A widely shared credential remains difficult to attribute to one user and can be reused by anyone who learns it. An annual change does not stop immediate credential stuffing after a leak. Require individual unique secrets and strengthen authentication controls instead.
Reducing secret length and making the credential common increases guessing and reuse risk. Convenience matters, but policy should support password managers and recovery while requiring strong unique credentials. A shorter shared value does not meet the requested resilience to offline guessing.





Cisco Certified Network Associate (CCNA) (200-301) Practice Tests