An organization has the following password policies:
• Passwords must be at least 16 characters long.
• A password cannot be the same as any previous 20 passwords.
• Three failed login attempts will lock the account for five minutes. Passwords must have one uppercase letter, one lowercase letter, and one non-alphanumeric symbol. *(refer to diagram in explanation below)* A database server was recently breached, and the incident response team suspects the passwords were compromised. Users with permission on that database server were forced to change their passwords for that server. Unauthorized and suspicious logins are now being detected on a completely separate server. Which of the following is MOST likely the issue and the best solution?
Select one answer.
Purchase Full Access to view answer options & explanation
The first 318 questions in this bank are completely free. Unlock Full Access on the exam page to view all answer choices, verified answers, explanations, and community discussions for all 1,059 questions.