CompTIA PenTest+ PT0-002 Practice Question

During a penetration test for ABC Corp, you identified that the password policy allows users to set extremely common passwords and does not enforce password complexity. As part of your report to the company's management, which of the following recommendations would be MOST appropriate to address this vulnerability?

  • Enforce password complexity requirements within the organization's password policy.

  • Encourage the use of biometric authentication for all users to replace passwords.

  • Implement an account expiration policy that forces users to re-register every 90 days.

  • Limit the number of login attempts to three before locking out the user account.

  • Increase the frequency of security monitoring to catch potential breaches.

  • Advise the company to eliminate passwords entirely in favor of a physical token-based system.

CompTIA PenTest+ PT0-002
Reporting and Communication
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot