Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCCC Exam - Topic 7 Question 90 Discussion

An analyst investigated unused organizational accounts. The investigation found that:- 10% of accounts still have their initial login password, indicating they were never used- 10% of accounts have not been used in over six monthsWhich change in policy would mitigate the security risk associated with both findings?
C) Accounts without login activity for 15 days are automatically locked
A) Users are required to change their password at the next login after three months
B) Accounts must have passwords of at least 8 characters, with one number or symbol

GIAC GCCC Exam - Topic 7 Question 90 Discussion

Actual exam question for GIAC's GCCC exam
Question #: 90
Topic #: 7
[All GCCC Questions]

An analyst investigated unused organizational accounts. The investigation found that:

- 10% of accounts still have their initial login password, indicating they were never used

- 10% of accounts have not been used in over six months

Which change in policy would mitigate the security risk associated with both findings?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Marshall at Jul 15, 2026, 10:42 AM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Stephania
4 days ago
10% of accounts still have initial passwords? That's wild!
upvoted 0 times
...
Katy
9 days ago
I feel like requiring stronger passwords is important, but it might not address the issue of accounts that are just sitting there unused.
upvoted 0 times
...
Lonny
14 days ago
I practiced a similar question where changing passwords regularly was emphasized, but I can't recall if that was the best approach here.
upvoted 0 times
...
Kina
19 days ago
I think the option about locking accounts after 15 days of inactivity makes sense, especially since 10% haven't been used in over six months.
upvoted 0 times
...
Estrella
25 days ago
I remember discussing how unused accounts can be a security risk, but I'm not sure which policy would be most effective.
upvoted 0 times
...

Save Cancel