Câu 132: CAS-004: CompTIA Advanced Security Practitioner (CASP+) CAS-004

An analyst is evaluating the security of a web application that does not hold sensitive or financial data. The application requires users to have a minimum password length of 12 characters. One of the characters must be capitalized, and one must be a number. To reset the password, the user is asked to provide the birthplace, birthdate, and mother's maiden name. When all of these are entered correctly, a new password is emailed to the user. Which of the following should concern the analyst the MOST?

1. A. The security answers may be determined via online reconnaissance. — đáp án hiện tại
2. B. The password is too long, which may encourage users to write the password down.
3. C. The password should include a special character.
4. D. The minimum password length is too short.