CompTIA Security+ (SY0-601) — Question 181

An employee’s company account was used in a data breach. Interviews with the employee revealed:

• The employee was able to avoid changing passwords by using a previous password again.
• The account was accessed from a hostile, foreign nation, but the employee has never traveled to any other countries.

Which of the following can be implemented to prevent these issues from reoccurring? (Choose two.)

Answer options

• A. Geographic dispersal
• B. Password complexity
• C. Password history
• D. Geotagging
• E. Password lockout
• F. Geofencing

Correct answer: C

Explanation

Implementing password history can prevent users from reusing old passwords, thereby increasing security. While other options like geofencing and password complexity are useful, they do not directly address the issue of password reuse that contributed to the breach.