Exam 8: Desktop and Server Os Vulnerabilities

Correct Answer:

Verified

A comprehensive password policy is critical,as a user name and password are often all that stands between an attacker and access.A password policy should include the following:
- Change passwords regularly on system-level accounts
- Require users to change their passwords regularly
- Require a minimum password length of at least eight characters
- Require complex passwords
- Passwords can't be common words,words found in the dictionary,or slang,jargon,or dialect
- Passwords must not be identified with a particular user
- Never write a password down or store it online or in a file on the user's computer
- Don't hint at or reveal a password to anyone over the phone,in e-mail,or in person
- Use caution when logging on to make sure no one sees you entering your password
- Limit reuse of old passwords