An organization has experienced several data breaches over the last five years. These data breaches have cost the organization financially and damaged its reputation. The organization has hired a cybersecurity penetration team to perform a full security audit on the entire organization. This independent contractor conducted the audit and found the following vulnerabilities:

An organization has experienced several data breaches over the last five years. These data breaches have cost the organization
financially and damaged its reputation. The organization has hired a cybersecurity penetration team to perform a full security audit on the entire organization. This independent contractor conducted the audit and found the following vulnerabilities:

• Sixty percent of all organization passwords audited were cracked within 6 hours.
• Stolen credentials were used to gain access to unauthorized network resources.
• Phishing attacks were carried out to compromise user passwords

What can the organization do to mitigate all the defined risks?

• institute a password reset for all accounts
• change password complexity rules
• implement MFA
• change the minimum password length rules

Related exam: Cyber Threat Management (CyberTM) Course Final Exam Answers