MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is the recommended minimum password length according to NIST guidelines for privileged cloud accounts?
   a. 8 characters
   b. 12 characters
   c. 15 characters
   d. 20 characters
   Answer: c. 15 charactersstrongdm
2. Which of the following is NOT considered a best practice in password complexity policies?
   a. Mandating special character usage
   b. Allowing passwords shorter than 8 characters
   c. Screening for breached passwords
   d. Supporting passphrases
   Answer: b. Allowing passwords shorter than 8 characterslearn.microsoft+1
3. Which type of passwords does NIST advocate for in their 2025 guidelines?
   a. Predictable passwords
   b. Complex composition passwords
   c. Longer, memorable passphrases
   d. Only numeric passwords
   Answer: c. Longer, memorable passphrasesstrongdm
4. Why is password history enforced in cloud password policies?
   a. To reduce storage requirements
   b. To prevent password reuse
   c. To allow user convenience
   d. To increase login speed
   Answer: b. To prevent password reuses2-labs
5. What common mistake do users make when forced to create complex passwords?
   a. Use personalized patterns
   b. Use dictionary words
   c. Follow predictable patterns
   d. Skip passwords
   Answer: c. Follow predictable patterns1kosmos+1
6. What is the main function of enabling multi-factor authentication (MFA) with a password policy?
   a. Simplify access
   b. Reduce password resets
   c. Add a layer of verification
   d. Remove password requirement
   Answer: c. Add a layer of verificationloginradius+1
7. A password policy requiring both uppercase and lowercase letters, numbers, and symbols is known as?
   a. Context-aware authentication
   b. Complexity enforcement
   c. Password aging
   d. Password exclusion
   Answer: b. Complexity enforcements2-labs+1
8. Which guideline is advised for minimum password age?
   a. 1 day
   b. 7 days
   c. 30 days
   d. 90 days
   Answer: b. 7 daysexamradar+1
9. What is a downside of frequent password expiration policies?
   a. Increases password strength
   b. Boosts user satisfaction
   c. Leads to simpler, predictable passwords
   d. Decreases password guessing attempts
   Answer: c. Leads to simpler, predictable passwordsstrongdm
10. What is the benefit of using passphrases over traditional passwords?
    a. Easier to guess
    b. Harder to memorize
    c. Increased length and unpredictability
    d. Lower entropy
    Answer: c. Increased length and unpredictability1kosmos+1
11. Which action helps reduce password reset rates according to modern guidelines?
    a. Imposing strict composition rules
    b. Supporting Unicode characters
    c. Allowing passwords less than 6 characters
    d. Disabling self-service resets
    Answer: b. Supporting Unicode charactersstrongdm
12. In the cloud, password composition rules should:
    a. Require only lowercase letters
    b. Be adaptive and risk-based
    c. Allow repeated passwords
    d. Ignore special characters
    Answer: b. Be adaptive and risk-basedstrongdm
13. Why should dictionary words be blocked in cloud password policies?
    a. Increase login time
    b. Allow easier memorization
    c. Prevent guessing attacks
    d. Expedite password resets
    Answer: c. Prevent guessing attackss2-labs+1
14. Password managers are recommended because they:
    a. Increase password strength
    b. Reduce the need for strong passwords
    c. Allow sharing passwords easily
    d. Increase the likelihood of breaches
    Answer: a. Increase password strengthloginradius+1
15. What should NOT be part of a password according to complexity rules?
    a. User’s name
    b. Random numbers
    c. Special characters
    d. Capital letters
    Answer: a. User’s namehcss+1
16. Password expiration in cloud policies is usually set to:
    a. 7 days
    b. 30-90 days
    c. 180 days
    d. Never
    Answer: b. 30-90 dayss2-labs
17. How do cloud providers typically enforce password complexity?
    a. With composition algorithms
    b. By blocking common passwords
    c. Through manual monitoring
    d. By allowing user choice
    Answer: b. By blocking common passwordslearn.microsoft+1
18. What is a recommended action if a password compromise is suspected?
    a. Disable password history
    b. Require password reset
    c. Allow indefinite password use
    d. Ignore the incident
    Answer: b. Require password resetloginradius+1
19. Which aspect of password complexity does NOT aid security?
    a. Short passwords
    b. Mixing character types
    c. Avoiding dictionary words
    d. Using passphrases
    Answer: a. Short passwords1kosmos+1
20. A cloud password policy should aim to:
    a. Balance complexity and usability
    b. Be as restrictive as possible
    c. Ignore user education
    d. Allow unlimited password age
    Answer: a. Balance complexity and usability1kosmos+1
21. Why is educating users about password policies important?
    a. To help them understand security importance
    b. To allow weak passwords
    c. To reduce the impact of breaches
    d. To slow down adoption
    Answer: a. To help them understand security importanceloginradius+2
22. How does auditing password-related activities strengthen security?
    a. Speeds up authentication
    b. Detects suspicious access
    c. Ignores security incidents
    d. Enables indefinite password use
    Answer: b. Detects suspicious accessexamradar
23. In cloud environments, how are password policies often managed?
    a. Per user profile
    b. Organizationally and by profile
    c. Only by users
    d. Not managed at all
    Answer: b. Organizationally and by profiles2-labs
24. NIST recommends using password screening against?
    a. Unknown words
    b. Breached password lists
    c. Simple patterns only
    d. Zero composition rules
    Answer: b. Breached password listsstrongdm
25. Why are password policies updated regularly?
    a. To keep pace with evolving threats
    b. To discourage user complaints
    c. To avoid policy enforcement
    d. To simplify password structure
    Answer: a. To keep pace with evolving threats1kosmos+1
26. Which is a benefit of supporting passphrases in cloud password policies?
    a. Reduced password guessing
    b. More memorable
    c. Increased password length
    d. All of the above
    Answer: d. All of the above1kosmos+1
27. The use of context-aware authentication helps by:
    a. Ignoring user locations
    b. Increasing breach risks
    c. Assessing authentication legitimacy
    d. Slowing authentication
    Answer: c. Assessing authentication legitimacyexamradar
28. What does password lockout policy typically do?
    a. Allows unlimited failed attempts
    b. Monitors failed logins
    c. Locks accounts after set failures
    d. Disables account permanently
    Answer: c. Locks accounts after set failuress2-labs
29. Why is minimum password age set in a policy?
    a. To allow indefinite password use
    b. To speed up logins
    c. To encourage full password lifecycle
    d. To avoid frequent forced changes
    Answer: d. To avoid frequent forced changesexamradar+1
30. The use of a password manager in the cloud is:
    a. Discouraged for admins only
    b. Recommended for all users
    c. Only necessary if passwords are weak
    d. Optional for privileged accounts
    Answer: b. Recommended for all usersloginradius+1
31. Blocking Unicode characters in passwords may lead to:
    a. Stronger security
    b. More password resets
    c. Greater memorability
    d. Fewer breaches
    Answer: b. More password resetsstrongdm
32. What is an effective way to monitor password strength?
    a. Manual user checks
    b. Automated analysis tools
    c. Ignoring password structure
    d. Length only
    Answer: b. Automated analysis toolss2-labs
33. Which type of password is MOST susceptible to brute-force attacks?
    a. Long passphrase
    b. Short, simple password
    c. Password with multiple unique words
    d. Screened password
    Answer: b. Short, simple password1kosmos+1
34. What should be communicated during password policy updates?
    a. Technical terminology only
    b. Guidance on strong password creation
    c. Encryption algorithms
    d. Changes should not be communicated
    Answer: b. Guidance on strong password creations2-labs+1
35. Password complexity policies in cloud avoid requiring:
    a. Only user names
    b. Arbitrary mandatory special characters
    c. Password screening
    d. Minimum length
    Answer: b. Arbitrary mandatory special charactersstrongdm
36. Which is NOT advisable in cloud password policies?
    a. Password history enforcement
    b. Allowing predictable patterns
    c. Screening for breaches
    d. MFA enablement
    Answer: b. Allowing predictable patternslearn.microsoft+1
37. Why do organizations adopt password blocklists?
    a. To encourage password reuse
    b. To eliminate weak, common passwords
    c. To speed up authentication
    d. To decrease entropy
    Answer: b. To eliminate weak, common passwordslearn.microsoft+1
38. What is the main risk of using easily guessable passwords?
    a. Enhanced security
    b. Successful guessing attacks
    c. Increased login time
    d. Reduced password reset rate
    Answer: b. Successful guessing attacksexamradar
39. Enforcing password length and composition helps:
    a. Increase security
    b. Slow authentication
    c. Reduce user convenience
    d. Enable unlimited password age
    Answer: a. Increase security1kosmos+1
40. Password complexity policy should be reviewed:
    a. Monthly
    b. Quarterly
    c. Periodically as threats evolve
    d. Never
    Answer: c. Periodically as threats evolveloginradius+1
41. Which of the following is a feature of modern cloud password policy?
    a. Enabling unlimited login attempts
    b. Disabling multi-factor authentication
    c. Supporting self-service password resets
    d. Ignoring breached password lists
    Answer: c. Supporting self-service password resetsloginradius+1
42. The disadvantage of enforcing arbitrary password expiration is:
    a. User frustration
    b. Increased password quality
    c. Improved user satisfaction
    d. Fewer breaches
    Answer: a. User frustrationstrongdm
43. What should not be used in password creation?
    a. Birthdates
    b. Random number sequences
    c. Mixed case characters
    d. Symbols
    Answer: a. Birthdates1kosmos
44. Which policy requires users to change their password after a security event?
    a. Password complexity
    b. Password reset enforcement
    c. Password never expires
    d. Access control
    Answer: b. Password reset enforcementloginradius+1
45. If cloud password policy is not enforced, organizations risk:
    a. Reduced breach likelihood
    b. More account compromises
    c. Improved performance
    d. Easier memorization
    Answer: b. More account compromisesinterviewquizz
46. Modern guidelines recommend password minimum length of:
    a. 6 characters
    b. 8 characters
    c. 12-16 characters
    d. 20 characters
    Answer: c. 12-16 characterss2-labs+1
47. The use of dictionary word restrictions in password policies is aimed to:
    a. Simplify passwords
    b. Increase strength against attacks
    c. Enable user names as passwords
    d. Remove password expiration
    Answer: b. Increase strength against attackss2-labs+1
48. Supporting passphrases in cloud policy often results in:
    a. Reduced password memorability
    b. Stronger, easily remembered passwords
    c. Difficulty in password storage
    d. Reduced entropy
    Answer: b. Stronger, easily remembered passwords1kosmos+1
49. Password complexity requirements should apply to:
    a. All cloud service users
    b. Only administrators
    c. Only guest accounts
    d. External auditors only
    Answer: a. All cloud service userslearn.microsoft+2
50. Which statement best summarizes modern password complexity in the cloud?
    a. Arbitrary complexity rules improve security
    b. Long, memorable passwords with breach screening give optimal security
    c. Unlimited password age reduces risk
    d. Ignoring password management processes
    Answer: b. Long, memorable passwords with breach screening give optimal securityloginradius+2

1. https://www.strongdm.com/blog/nist-password-guidelines
2. https://learn.microsoft.com/en-us/microsoft-365/admin/misc/password-policy-recommendations?view=o365-worldwide
3. https://s2-labs.com/admin-tutorials/managing-password-policies-control-access-to-organization/
4. https://www.1kosmos.com/security-glossary/password-complexity/
5. https://www.loginradius.com/blog/identity/password-management-best-practices
6. https://examradar.com/password-policies-and-best-practices-in-web-security-mcqs/
7. https://help.hcss.com/s/article/HCSS-Cloud-Password-Complexity-Requirements
8. https://www.interviewquizz.com/cloud-security-best-practices-interview-question-answer
9. https://learn.microsoft.com/en-us/azure/active-directory-b2c/password-complexity
10. https://www.sanfoundry.com/cyber-security-questions-answers-password-cracking-security-measures-1/
11. https://www.sanfoundry.com/1000-cloud-computing-questions-answers/
12. https://examradar.com/cloud-computing-and-security-challenges-mcqs/
13. https://www.scribd.com/document/918576922/Cloud-Computing-Mcq-Questions-All-5-Units
14. https://www.studocu.com/in/document/lovely-professional-university/cloud-computing/cse423-mcqs-good-mcqs/78455044
15. https://www.cliffsnotes.com/study-notes/12946726
16. https://www.scribd.com/document/691297348/cse423-mcqs
17. https://www.sanfoundry.com/operating-system-mcqs-security-user-authentication/
18. https://docs.uipath.com/automation-cloud/automation-cloud/latest/admin-guide/local-users-password-complexity-requirements
19. https://www.iansresearch.com/resources/all-blogs/post/security-blog/2021/05/03/password-policy-best-practices-for-your-business
20. https://www.securden.com/blog/top-10-password-policies.html