CyberCertPrepWeb App FundamentalsBrowser SecurityEASYFree question
What risk is associated with a browser storing passwords in its built-in password manager?
- A.If the user's sync account is shared, a family member may be able to view stored passwords from the account page
- B.If the browser is closed, the operating system may be able to delete stored passwords from the profile folder
- C.If the user visits a site over HTTP, a network observer may be able to read stored passwords from the page
- D.If the user's device is compromised, malware or an attacker with physical access may be able to extract stored passwords from the browser's storage
Why D is correct
Browser password managers encrypt stored passwords, but the master key is tied to the OS login. Malware running as the user, or an attacker with OS access, can potentially extract them. Enterprise solutions and dedicated password managers offer better isolation.
Know someone studying for Web App Fundamentals? Send them this one.