SANS Assessment of Student Learning Plan (ASLP) Security Awareness Training

Which of the following practices can help protect your online accounts?

1. Using common passwords for all accounts

2. Sharing your passwords with trusted colleagues

3. Enabling two-factor authentication

4. Storing passwords in a text document

The correct answer is: Enabling two-factor authentication

Enabling two-factor authentication (2FA) is a highly effective practice for protecting online accounts. This security measure requires users to provide two different forms of verification before gaining access to their accounts. Typically, this includes something the user knows (like a password) and something the user has (like a smartphone app code or a text message confirmation). By implementing 2FA, even if a password is compromised, the additional authentication step makes it much harder for unauthorized users to access the account, significantly enhancing security. The other practices mentioned would not contribute to the security of online accounts. Using common passwords across multiple accounts increases vulnerability since if one account is compromised, the others are at risk as well. Sharing passwords, even with trusted colleagues, poses a risk, as trust does not eliminate the potential for human error or breaches of confidentiality. Storing passwords in a text document is also insecure; if that document is lost or accessed by unauthorized individuals, it can lead to instant compromise of accounts. Thus, enabling two-factor authentication stands out as a robust defense strategy.