An analyst investigated unused organizational accounts.

GIAC GCCC Question Answer

An analyst investigated unused organizational accounts. The investigation found that:

-10% of accounts still have their initial login password, indicating they were never used

-10% of accounts have not been used in over six months

Which change in policy would mitigate the security risk associated with both findings?

Users are required to change their password at the next login after three months

Accounts must have passwords of at least 8 characters, with one number or symbol

Accounts without login activity for 15 days are automatically locked

GCCC PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"