ISC2 Certified in Cybersecurity (CC) Practice Question

Using a unique password for every separate account limits the damage that can occur if one set of credentials is exposed-an attacker cannot reuse that password to access other systems or services. Changing a username offers little protection because attackers typically target passwords, not account names. Storing passwords in an unsecured text file simply creates another point of compromise. Sharing even a strong password violates the principle of individual accountability and increases the risk of unauthorized access. Therefore, the only practice that truly reduces the consequences of a compromised password is creating a different password for each account.