Which of the following is a best practice for implementing strong password policies within an organization?

Which of the following is a best practice for implementing strong password policies within an organization?
A . Allowing users to choose their own passwords, regardless of complexity
B . Requiring users to change their password every 90 days
C . Storing passwords in clear text in a central database
D . Allowing users to reuse their previous passwords

View Answer

Answer: B

Explanation:

Option 1: Incorrect. Allowing users to choose their own passwords, regardless of complexity, can lead to weak passwords that are easily guessed or cracked.

Option 2: Correct. Requiring users to change their password every 90 days helps to ensure that passwords are regularly updated and less likely to be compromised.

Option 3: Incorrect. Storing passwords in clear text in a central database is a security risk as it exposes the passwords to potential unauthorized access.

Option 4: Incorrect.

Allowing users to reuse their previous passwords increases the risk of unauthorized access as attackers

may already be aware of the user’s previous passwords.