Which term describes the procedure for changing a forgotten or compromised password?

Which term describes the procedure for changing a forgotten or compromised password?

• A. Password history
• B. Password reset process
• C. Password privacy
• D. Plain text vs cipher text

Answer: (B)

When a user cannot recall their password or suspects it has been compromised, the appropriate action is to go through a password reset process. This workflow is designed to verify the user’s identity and securely establish a new credential, often using a reset link or token sent via email, security questions, or multi-factor verification, followed by the user creating a new password that is stored securely (typically hashed). This sequence directly addresses regaining access or replacing a compromised credential. Password history, by contrast, deals with remembering previous passwords to prevent reuse; it doesn’t describe how to recover or replace a forgotten or compromised password. Password privacy focuses on protecting the password from exposure, not on the recovery process. Plain text vs cipher text relates to how passwords or data are stored or transmitted, which is an encryption concern, not the procedure for resetting a forgotten or compromised password.

When a user cannot recall their password or suspects it has been compromised, the appropriate action is to go through a password reset process. This workflow is designed to verify the user’s identity and securely establish a new credential, often using a reset link or token sent via email, security questions, or multi-factor verification, followed by the user creating a new password that is stored securely (typically hashed). This sequence directly addresses regaining access or replacing a compromised credential.

Password history, by contrast, deals with remembering previous passwords to prevent reuse; it doesn’t describe how to recover or replace a forgotten or compromised password. Password privacy focuses on protecting the password from exposure, not on the recovery process. Plain text vs cipher text relates to how passwords or data are stored or transmitted, which is an encryption concern, not the procedure for resetting a forgotten or compromised password.