David is the system administrator for a company. A user calls him and tells that he has forgotten his password and requests a new password. What should David do?

Question

Quizplus · Accepted Answer

The password should be changed only after verifying that the person is who he/she claims to be.
Key Takeaway: Changing any authentication details without proper verification procedure may lead to data theft. Most social engineering scenarios are carried out this way, therefore, the credentials need to be changed only after a positive verification.

David Is the System Administrator for a Company