CISA Certified Information Systems Auditor – Question1846

Which of the following is a good tool to use to help enforcing the deployment of good passwords?

A.
password cracker
B. local DoS attacker
C. network hacker
D. remote windowing tool
E. None of the choices.

Correct Answer: A

Explanation:

Explanation:
“Passwords are the first defensive line in protecting your data and information. Your users need to be made aware of what a password provides them and what can be done with their password. They also need to be made aware of the things that make up a good password versus a bad password. A good password has mixed-case alphabetic characters, numbers, and symbols. Do use a password that is at least eight or more characters. You may want to run a “password cracker” program periodically, and require users to immediately change any easily cracked passwords. In any case ask them to change their passwords every 90 to 120 days.”