Ethical Hacking Essentials Practice Test

Which password security practice should be avoided?

1. Using unique passwords for different accounts

2. Allowing the storage of passwords in an unsecured location

3. Changing passwords regularly

4. Implementing multi-factor authentication

The correct answer is: Allowing the storage of passwords in an unsecured location

The practice of allowing the storage of passwords in an unsecured location should be avoided because it significantly increases the risk of unauthorized access to sensitive accounts and information. Storing passwords without adequate security—such as using plain text files, unencrypted notes, or unsecured password managers—can lead to a data breach if anyone gains access to that storage. In contrast, using unique passwords across different accounts increases security by ensuring that if one password is compromised, it does not put other accounts at risk. Changing passwords regularly helps to mitigate risks associated with long-term exposure. Implementing multi-factor authentication adds an additional layer of security, making it much harder for attackers to gain access, even if they have the password. Each of these practices contributes to a stronger overall security posture, while the storage of passwords in an unsecured location undermines those efforts completely.