Free practice · multiple-choice · medium

Practice

Protect account recovery

Which practices protect a work account's recovery path?

Account protection lifecycle

Secure access continues after a password is created

  1. OwnerUse an individual approved account
  2. AccessGrant only the current work need
  3. CredentialStore a unique secret safely
  4. MFAApprove only an expected sign-in
  5. RecoveryProtect recovery routes and sessions
  6. ReviewAct on changes, alerts, and departures

Identity, least privilege, unique credentials, MFA, protected recovery, and alert review work as one account-control system.

Choose all that apply