Which of the following presents the GREATEST exposure to internal attack on a network?

A.
User passwords are not automatically expired

B.
All network traffic goes through a single switch

C.
User passwords are encoded but not encrypted

D.
All users reside on a single internal subnet

Explanation:

When passwords are sent over the internal network in an encoded format, they can easily be
converted to clear text. All passwords should be encrypted to provide adequate security. Not
automatically expiring user passwords does create an exposure, but not as great as having
unencrypted passwords. Using a single switch or subnet does not present a significant exposure.