easy5 pts · first answer countsidentity-securitypassword-policy
Security questions for account recovery
A portal asks users to set 'mother's maiden name' and 'first school' as recovery questions. What does current NIST guidance say about this?
Discussion 0
Join free to post in the discussion.
Related questions
- Which login is really two-factor?Cybersecurity Analyst
- Why passwords are saltedCybersecurity Analyst
- Brute force or password spraying?Cybersecurity Analyst
- Authentication or authorization?Cybersecurity Analyst
- What a Kerberos TGT is forCybersecurity Analyst
- Where the Kerberos KDC runsCybersecurity Analyst
- Windows event for a failed logonCybersecurity Analyst
- Event for a locked-out accountCybersecurity Analyst