MENU
An analyst investigated unused organizational accounts. The investigation found that:
- 10% of accounts still have their initial login password, indicating they were never used
- 10% of accounts have not been used in over six months
Which change in policy would mitigate the security risk associated with both findings?
Suggested Answer: C
Get Premium GCCC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
SE
Serina
28 days ago
Option B is important too, but if accounts are inactive, they should be locked first.
EM
Emmanuel
1 month ago
I agree, but option A is also good. Regular password changes help security.
MI
Mitsue
1 month ago
I think option C is the best. Locking inactive accounts is smart.
SH
Sherly
1 month ago
Why not just delete inactive accounts instead? Seems easier.
LA
Lai
2 months ago
10% unused for over six months? That's a security nightmare!
RO
Rory
2 months ago
Totally agree with option A! Password changes are a must.
RO
Ronald
2 months ago
I doubt locking accounts after 15 days will help much.
ST
Stephania
2 months ago
10% of accounts still have initial passwords? That's wild!
KA
Katy
2 months ago
I feel like requiring stronger passwords is important, but it might not address the issue of accounts that are just sitting there unused.
LO
Lonny
2 months ago
I practiced a similar question where changing passwords regularly was emphasized, but I can't recall if that was the best approach here.
KI
Kina
3 months ago
I think the option about locking accounts after 15 days of inactivity makes sense, especially since 10% haven't been used in over six months.
ES
Estrella
3 months ago
I remember discussing how unused accounts can be a security risk, but I'm not sure which policy would be most effective.