Single Sign-On (SSO) and Its Benefits

The Dangers of Reusing Passwords

Prev Question Next Question

Question

What is called a password that is the same for each log-on session?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C.

Source: KRUTZ, Ronald L.

& VINES, Russel.

D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 36.

The password that is the same for each log-on session is called a static password. A static password is a fixed set of characters that a user must enter to gain access to a system or application. It is usually set by the user or the system administrator, and it does not change unless the user decides to change it.

Static passwords are the most common form of authentication used in computer systems, but they have some significant weaknesses. Because static passwords remain the same, they are vulnerable to attack by hackers who may try to guess or steal them. Once a hacker obtains a static password, they can use it to gain unauthorized access to the system or application.

To address these weaknesses, other forms of authentication have been developed, including dynamic passwords and one-time passwords. Dynamic passwords change each time a user logs on, making it more difficult for hackers to guess or steal them. One-time passwords are generated for each log-on session and are only valid for a short period, further reducing the risk of a hacker stealing the password.

In summary, a static password is a fixed set of characters that does not change between log-on sessions, making it vulnerable to attacks. Dynamic and one-time passwords are more secure alternatives that change each time a user logs on or generate a unique password for each session.