MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. The main purpose of enforcing password history in cybersecurity is to prevent users from reusing old passwords.
   a. To make passwords easier to remember
   b. To enforce more frequent password changes
   c. To prevent password reuse
   d. To limit account access
   Answer: cosibeyond+2​
2. In Windows Active Directory, the “Enforce password history” setting prevents users from reusing their last how many passwords?
   a. 1–10
   b. 1–24
   c. 1–50
   d. 1–5
   Answer: bkloudle+1​
3. Password history helps mitigate which common security risk?
   a. Malware infection
   b. Password reuse
   c. Phishing attacks
   d. Unauthorized password sharing
   Answer: bloginradius+1​
4. If a system’s password history is set to 5, what does it mean?
   a. The user must change passwords every 5 days
   b. Only 5 passwords can be stored in the database
   c. The user cannot reuse any of the last 5 passwords
   d. Passwords must contain at least 5 unique characters
   Answer: clearn.microsoft+1​
5. What best describes password reuse in cybersecurity?
   a. Re-creating old passwords from memory
   b. Using the same password across multiple systems or services
   c. Changing a password before expiry
   d. Encrypting old passwords for storage
   Answer: bsbscyber+1​
6. Why is preventing password reuse crucial for organizations?
   a. It increases authentication speed
   b. It reduces the risk of password-related breaches
   c. It simplifies login procedures
   d. It enhances employee convenience
   Answer: bsbscyber+1​
7. What is the maximum password history value recommended by the CIS benchmark for AWS IAM?
   a. 5
   b. 12
   c. 24
   d. 50
   Answer: ckloudle​
8. Password history primarily enhances what aspect of security?
   a. Confidentiality
   b. Integrity
   c. Availability
   d. Authentication
   Answer: dosibeyond+1​
9. Enforcing password history helps prevent which practice by users?
   a. Creating long passwords
   b. Reusing old or compromised credentials
   c. Storing passwords securely
   d. Synchronizing passwords
   Answer: blearn.microsoft+1​
10. Which organization’s guideline mentions avoiding frequent password changes but enforcing password history?
    a. ISO
    b. NIST
    c. GDPR
    d. CIS
    Answer: bsecureframe​
11. What happens if password history is not enforced?
    a. Passwords automatically expire
    b. Users can reuse previously used passwords
    c. Systems block old credentials automatically
    d. Passwords become encrypted
    Answer: bosibeyond+1​
12. The key goal of password reuse prevention is to enhance defense against:
    a. SQL Injection
    b. Credential stuffing attacks
    c. Insider data theft
    d. Hardware failures
    Answer: bintelligentdiscovery+1​
13. Which policy feature in Active Directory controls password history?
    a. Enforce minimum length
    b. Account lockout duration
    c. Enforce password history
    d. Require complex passwords
    Answer: clearn.microsoft​
14. How does enforcing password history improve organizational compliance?
    a. Aligns with NIST password standards
    b. Reduces software licensing cost
    c. Increases password expiry times
    d. Simplifies MFA configuration
    Answer: asecureframe+1​
15. Password history settings typically apply on what basis?
    a. Per user account
    b. Globally for all networks
    c. Only for guest users
    d. Only for administrators
    Answer: aloginradius+1​
16. What can users do to comply with strict password history settings while maintaining convenience?
    a. Use password generators or managers
    b. Use weaker passwords
    c. Document passwords manually
    d. Disable password rotation
    Answer: abitlyft+1​
17. In general, how is password history enforced technically?
    a. Through hardware tokens
    b. By storing password hashes from past passwords
    c. By email verification
    d. By user consent agreements
    Answer: bibm+1​
18. What could occur if password history enforcement is too strict?
    a. Users may share credentials
    b. System performance decreases
    c. Password complexity reduces
    d. Account lockouts diminish
    Answer: asbscyber+1​
19. Which cybersecurity framework supports avoiding reuse of the last 24 passwords?
    a. PCI DSS
    b. CIS
    c. NIST
    d. HIPAA
    Answer: bintelligentdiscovery+1​
20. Password history feature is often combined with:
    a. Password expiration
    b. Account recovery
    c. Email verification
    d. Biometrics
    Answer: aloginradius+1​
21. What happens if password history enforcement is disabled?
    a. MFA becomes mandatory
    b. Users can reuse recent passwords
    c. Passwords expire faster
    d. Account lockouts are triggered
    Answer: bkloudle+1​
22. What attack is made easier if users reuse old passwords?
    a. Brute force
    b. Credential stuffing
    c. Denial of service
    d. Port scanning
    Answer: bintelligentdiscovery+1​
23. Enforcing password history supports which security principle?
    a. Defense in depth
    b. Least privilege
    c. Layer 3 protection
    d. Open authentication
    Answer: aosibeyond+1​
24. What parameter defines password reuse restriction in AWS IAM policy?
    a. PreventPasswordReuse
    b. BlockHistoryCount
    c. HashPasswordPolicy
    d. AccessReuseLimit
    Answer: akloudle​
25. What is stored by the system to implement password history?
    a. Encrypted passwords
    b. Password hash values
    c. Plaintext passwords
    d. User PINs
    Answer: bibm+1​
26. In an enterprise environment, password history directly helps protect against:
    a. Keylogging
    b. Reuse of breached credentials
    c. Data encryption failures
    d. Insider threats only
    Answer: bintelligentdiscovery+1​
27. If a system stores the hashes of the last 10 passwords, what setting is in effect?
    a. Password expiration policy
    b. Password history enforcement
    c. Two-factor authentication
    d. Password complexity check
    Answer: bloginradius+1​
28. Password histories are evaluated when users:
    a. Log into their accounts
    b. Change or reset their passwords
    c. Modify their email addresses
    d. Enable two-factor authentication
    Answer: blearn.microsoft+1​
29. Which user behavior undermines password history enforcement?
    a. Using password managers
    b. Cycling through predictable variations
    c. Using long passphrases
    d. Enabling MFA
    Answer: bsbscyber+1​
30. NIST recommends password policies focused more on:
    a. Complexity than history
    b. Passphrase strength and reuse detection
    c. Frequent rotation cycles
    d. Limiting password length
    Answer: bsecureframe​
31. What does a “password history count” of 10 mean?
    a. Passwords must contain 10 digits
    b. System stores the last 10 used passwords
    c. Password must be changed every 10 days
    d. Ten users share one password
    Answer: bloginradius+1​
32. The term “password lifecycle” includes password history because it ensures:
    a. Passwords expire slowly
    b. Old credentials are not reused
    c. Password resets are optional
    d. Users keep one password forever
    Answer: bosibeyond​
33. What is a potential weakness in implementing password history incorrectly?
    a. Reduced account lockout period
    b. Insecure storage of password history hashes
    c. Allowing user renaming
    d. Short passwords
    Answer: bibm​
34. A strong password history policy should also enforce:
    a. Encryption of user sessions
    b. Minimum password length and complexity
    c. Multi-device access
    d. Frequent resets
    Answer: bsecureframe+1​
35. What system capability ensures stored password histories are not compromised?
    a. Hashing and salting mechanisms
    b. Plaintext storage
    c. User-defined tables
    d. Default configurations
    Answer: aibm+1​
36. If password history is set too low, what is the likely risk?
    a. Forgotten passwords
    b. Password reuse
    c. System downtime
    d. Login failures
    Answer: bosibeyond+1​
37. Enforcing a password history count of 24 aligns with which standard?
    a. CIS Benchmark
    b. HIPAA
    c. ISO 22301
    d. FERPA
    Answer: akloudle​
38. The password history feature is typically configured in which policy section in Group Policy?
    a. Network Access Policies
    b. Password Policy under Account Policies
    c. User Account Control Policies
    d. File Sharing Policies
    Answer: blearn.microsoft​
39. Combining password history with MFA improves:
    a. Confidentiality only
    b. Defense in authentication
    c. System availability
    d. Data redundancy
    Answer: bbitlyft+1​
40. Password history settings prevent which improper security behavior?
    a. Password shortening
    b. Recycling of old passwords
    c. Use of password hints
    d. Increasing password length
    Answer: bloginradius+1​
41. The major advantage of tracking password history is:
    a. Limiting account access times
    b. Preventing recurrent password reuse
    c. Simplifying group policy design
    d. Reducing password expiration requirements
    Answer: bkloudle+1​
42. How does password history contribute to compliance audits?
    a. Shows password repetition prevention evidence
    b. Reduces policy enforcement
    c. Hides password details
    d. Validates MFA enrollment
    Answer: asbscyber+1​
43. When password history is configured, what happens during a password change attempt?
    a. The system compares the new password against stored history
    b. The new password is ignored
    c. Users are allowed any password
    d. Old passwords are deleted
    Answer: alearn.microsoft+1​
44. Which Windows console is used to set password history policies?
    a. Local Security Policy Editor
    b. Device Manager
    c. Event Viewer
    d. Performance Monitor
    Answer: alearn.microsoft​
45. Enforcing password history primarily targets which threat?
    a. Replay attacks
    b. Credential reuse exposure
    c. DNS poisoning
    d. Insider fraud
    Answer: bsbscyber+1​
46. On AWS, password history policy affects:
    a. IAM user accounts
    b. EC2 network configurations
    c. CloudWatch alarms
    d. Lambda functions
    Answer: akloudle​
47. How can an organization reinforce password history policies effectively?
    a. Combine enforcement with employee training
    b. Allow password reuse occasionally
    c. Disable complexity checks
    d. Enforce unlimited login attempts
    Answer: abitlyft+1​
48. A common misconception about password history enforcement is that it:
    a. Weakens security
    b. Is unnecessary if using MFA
    c. Improves brute-force resistance
    d. Prevents credential reuse
    Answer: bosibeyond+1​
49. What is typically stored in system password history logs?
    a. Password hashes of previous passwords
    b. Plaintext passwords
    c. Usernames
    d. MFA tokens
    Answer: aibm+1​
50. The principle behind password history enforcement is based on:
    a. Deterrence of repetitive password use
    b. Shortening password lengths
    c. Eliminating user complexity
    d. Allowing convenience over security
    Answer: asbscyber+2​

1. https://www.osibeyond.com/blog/password-policy/
2. https://www.loginradius.com/blog/identity/password-history-expiration-complexity
3. https://learn.microsoft.com/en-us/answers/questions/2115300/preventing-password-reuse-in-active-directory-for
4. https://kloudle.com/academy/how-to-enable-prevent-password-reuse-policy-in-aws/
5. https://sbscyber.com/blog/password-reuse-prevention
6. https://secureframe.com/blog/password-policy
7. https://www.intelligentdiscovery.io/controls/iam/password-reuse-prevention
8. https://www.bitlyft.com/resources/cybersecurity-101-password-best-practices
9. https://www.ibm.com/docs/en/idr/11.3.3?topic=accounts-preventing-reuse-passwords
10. https://www.sanfoundry.com/cyber-security-questions-answers-password-cracking-security-measures-1/
11. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
12. https://examradar.com/password-policies-and-best-practices-in-web-security-mcqs/
13. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
14. https://letsfindcourse.com/cyber-security-mcq/secure-password-mcq-questions-and-answers
15. https://www.scribd.com/document/865399924/Cyber-Security-Awareness-MCQs
16. https://testbook.com/objective-questions/mcq-on-cyber-security-and-emerging-technologies–5eea6a0d39140f30f369e309
17. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
18. https://gibraltarsolutions.com/blog/password-policy/
19. https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_account-policy.html
20. https://learn.microsoft.com/en-us/microsoft-365/admin/misc/password-policy-recommendations?view=o365-worldwide