Exam IIA-CIA-Part3 topic 2 question 292 discussion

Actual exam question from IIA's IIA-CIA-Part3

Question #: 292
Topic #: 2

An internal auditor discusses user-defined default passwords with the database administrator. Such passwords will be reset as soon as the user logs in for the first time, but the initial value of the password is set as "123456." Which of the following are the auditor and the database administrator most likely discussing in this situation?

A. Whether it would be more secure to replace numeric values with characters.
B. What happens in the situations where users continue using the initial password.
C. What happens in the period between the creation of the account and the password change.
D. Whether users should be trained on password management features and requirements.

Show Suggested Answer

Suggested Answer: C 🗳️

by KonradK at Jan. 24, 2024, 7:50 a.m.

Comments

Submit Cancel

emtofid

3 weeks, 6 days ago

Selected Answer: C

The key concern is the security risk during the period between account creation and the password change, where the default password is easily guessable (e.g., "123456"), leaving the account vulnerable to unauthorized access.

upvoted 1 times

...

KonradK

7 months, 2 weeks ago

Shouldn't it be B?

upvoted 1 times

...

Exam IIA-CIA-Part3 All Questions

View all questions & answers for the IIA-CIA-Part3 exam

Exam IIA-CIA-Part3 topic 2 question 292 discussion

Comments

emtofid

KonradK

SY0-701