Free practice · single-choice · medium

Practice

Respond to a reused-password alert

A breach notice says a personal shopping site exposed a password that was also used for a work account. What is the safest response?

Account protection lifecycle

Secure access continues after a password is created

  1. OwnerUse an individual approved account
  2. AccessGrant only the current work need
  3. CredentialStore a unique secret safely
  4. MFAApprove only an expected sign-in
  5. RecoveryProtect recovery routes and sessions
  6. ReviewAct on changes, alerts, and departures

Identity, least privilege, unique credentials, MFA, protected recovery, and alert review work as one account-control system.

Choose one answer