Exam IIA-CIA-Part3 topic 1 question 89 discussion

I would rule out Option D because it deals specifically with session security. In this particular context, I would then say Option D is cropped out of the picture, leaving option A to option C. Why C? Password changes can sometimes lead to weak password practices, hence being the least effective as much as it helps in preventing password compromise, but encryption and suspension of USER ID would be what I consider better controls than (C)

D is the least effective control for protecting passwords specifically, as its primary purpose is to secure active sessions rather than safeguarding the passwords themselves.

The correct answer is B. Encryption of passwords prior to their transmission or storage. This option is the least effective control to protect passwords. While encryption is important for securing passwords, it only protects against unauthorized access to the stored or transmitted password. Other options provide additional layers of protection, such as suspending user IDs after repeated invalid password attempts, forcing password changes, and automatic logoff of inactive users

D is the correct answer, it does not protect the password.

The correct answer is B , according to GTAG

I think D should be the answer.

I think b is correct regarding GTAG of auditing identity and access management

the answer doesnt make sense. How is the forced changing of passwords a weak control?