Free practice · matching · hard

Practice

Match account states to safe actions

Match each account state to the strongest next action.

Account protection lifecycle

Secure access continues after a password is created

  1. OwnerUse an individual approved account
  2. AccessGrant only the current work need
  3. CredentialStore a unique secret safely
  4. MFAApprove only an expected sign-in
  5. RecoveryProtect recovery routes and sessions
  6. ReviewAct on changes, alerts, and departures

Identity, least privilege, unique credentials, MFA, protected recovery, and alert review work as one account-control system.

Match each item