You work for a small city IT department and are training a c

You work for a small city IT department and are training a class of new hires on computer security. You are discussing password security, and you identify several user behaviors that indicate the use of insecure passwords. Of the following, what are some of those behaviors? (Choose two.)

A. Using multiple passwords

B. Being unable to remember all of your passwords

C. Using special symbols in your passwords

D. Having a favorite password

Solution

(A) Using multiple passwords

Users sometimes needs to remember multiple passwords for different applications to which they register/login which results in having large number of passwords which further reduces user\'s memorability and leads to increase in insecure practices like writing down passwords.
The main reason behind few users writing down their passwords is because some applications asks users to constantly change their passwords every month. Due to this, users don\'t focus on giving a strong and secured password each time and instead provides poor passwords. (eg. using password as their password) .
It is found that once a password is chosen, a user is unlikely to change it until it has been shown to be compromised or if it has been expired. To memorise multiple passwords, users comply with security rules and provides related passwords by varying elements in their passwords.eg (Hello1, Hello2, Hello3..).

(D) Having a favorite password

Many users have a favorite password which they use to login to different applications which is the main reason why their online accounts can be easily compromised.
People continue to use easy-to-guess passwords such as “123456” or “password” for their accounts despite knowing the risk of their account getting hacked easily.
To avoid this, many sites have made it compulsory to set a password which is a combination of uppercase lowercase characters, special characters and numerical digits.
Microsoft has banned such commonly used/ favorite passwords from all it\'s Microsoft accounts.