Rules to govern secure selection and maintenance of knowledge factor authentication secrets, such as length, complexity, age, and reuse.

Rules to govern secure selection and maintenance of knowledge factor authentication secrets, such as length, complexity, age, and reuse.

• A. password best practices
• B. tokenization
• C. data masking
• D. steganography

Answer: (A)

Knowledge-factor secrets need structured rules to ensure they stay strong and manageable over time. Password best practices cover how to choose a password that is long enough, uses a mix of character types, isn’t easily guessable, and isn’t reused across accounts. They also guide how often passwords should be updated and how to avoid reusing recent ones, which helps prevent attackers from gaining access through leaked or stolen credentials. The other techniques focus on protecting data in storage or transit or hiding information in files, rather than guiding how to create and maintain user passwords, so they don’t address the needs of knowledge-factor secret management.

Knowledge-factor secrets need structured rules to ensure they stay strong and manageable over time. Password best practices cover how to choose a password that is long enough, uses a mix of character types, isn’t easily guessable, and isn’t reused across accounts. They also guide how often passwords should be updated and how to avoid reusing recent ones, which helps prevent attackers from gaining access through leaked or stolen credentials. The other techniques focus on protecting data in storage or transit or hiding information in files, rather than guiding how to create and maintain user passwords, so they don’t address the needs of knowledge-factor secret management.