Which of the following does not apply to system-generated passwords?

Which of the following does not apply to system-generated passwords?
A .  Passwords are harder to remember for users.
B .  If the password-generating algorithm gets to be known, the entire system is in jeopardy.
C .  Passwords are more vulnerable to brute force and dictionary attacks.
D .  Passwords are harder to guess for attackers.

View Answer

Answer: C

Explanation: Users tend to choose easier to remember passwords. System-generated passwords can provide stronger, harder to guess passwords. Since they are based on rules provided by the administrator, they can include combinations of uppercase/lowercase letters, numbers and special characters, making them less vulnerable to brute force and dictionary attacks. One danger is that they are also harder to remember for users, who will tend to write them down, making them more vulnerable to anyone having access to the user’s desk. Another danger with system-generated passwords is that if the password-generating algorithm gets to be known, the entire system is in jeopardy. Source: RUSSEL, Deborah & GANGEMI, G.T. Sr., Computer Security Basics, O’Reilly, July 1992 (page 64).