If a password is forgotten, which document should guide retrieval and access procedures?

If a password is forgotten, which document should guide retrieval and access procedures?

• A. Update the password with the supervisor's approval
• B. Do not share the password and direct to the policy on retrieving forgotten passwords
• C. Use a default password provided by IT
• D. Use the password of another coworker

Answer: (B)

When a password is forgotten, the correct approach is to follow the organization’s password retrieval or reset policy. This policy lays out how to verify your identity, who is authorized to perform resets, and the secure steps to regain access—usually through the IT help desk or a self-service portal, often with a temporary password and a rule to change it at the next login. This keeps access controlled, auditable, and reduces the risk of unauthorized entry. Never share passwords or use someone else’s credentials, and avoid default passwords, as these weaken security and violate policy. Following the documented procedure ensures you restore access safely and in line with security and privacy requirements.

When a password is forgotten, the correct approach is to follow the organization’s password retrieval or reset policy. This policy lays out how to verify your identity, who is authorized to perform resets, and the secure steps to regain access—usually through the IT help desk or a self-service portal, often with a temporary password and a rule to change it at the next login. This keeps access controlled, auditable, and reduces the risk of unauthorized entry. Never share passwords or use someone else’s credentials, and avoid default passwords, as these weaken security and violate policy. Following the documented procedure ensures you restore access safely and in line with security and privacy requirements.