8.13 Hardening Authentication 1

You are configuring the local security policy of a Windows system. You want to require users to create passwords that are at least 10 characters long. You also want to prevent login after three unsuccessful login attempts. Which policies should you configure? (select two)

Account lockout threshold Minimum password length

For users on your network, you want to automatically lock user accounts if four incorrect passwords are used within 10 minutes. What should you do?

Configure account lockout policies in Group Policy.

You want to make sure that all users have passwords over eight characters in length and that passwords must be changed every 30 days. What should you do?

Configure account policies in Group Policy.

You have hired 10 new temporary workers who will be with the company for 3 months. How can you make sure that these users can only log on during regular business hours?

Configure day/time restrictions in the user accounts.

Upon running a security audit in your organization, you discover that several sales employees are using the same domain user account to log in and update the company's customer database. Which action should you take? (select two)

Delete the account that the sales employees are currently using Train sales employees to use their own user accounts to update the customer database

Which of the following is not an important aspect of password management?

Enable account lockout

Which of the following is the single best rule to enforce when designing complex passwords?

Longer passwords

You are configuring the local security policy of a Windows system. You want to prevent users from reusing old passwords. You also want to force them to use a new password for at least five days before changing it again. Which policies should you configure? (select two)

Minimum password age Enforce password history

You are teaching new users about security and passwords. Which of the following is the best example of a secure password?

T1a73gZ9!

You have implemented account lockout with a clipping level of 4. What will be the effect of this setting?

The account will be locked after four incorrect attempts.

You have just configured the password policy and set the minimum password age to 10. What will be the effect of this configuration?

Users cannot change the password for 10 days