Which statement about password sharing among PBSO employees is accurate?

Which statement about password sharing among PBSO employees is accurate?

• A. Employees may share passwords with other employees if needed, but the password must be changed afterward.
• B. Employees may share passwords with no change.
• C. Employees may never share passwords.
• D. Passwords may be shared only with supervisor approval and then change.

Answer: (A)

Password-sharing practices and the requirement to change credentials after sharing are being tested. The correct statement reflects a controlled approach: colleagues may share a password when access is needed for a task, but the password must be changed afterward. This ensures that the temporary access is time-limited and that accountability is preserved—the person who shared the password no longer has ongoing access once the password is updated, and the new user can be tracked under the new credential. Why this is best: it allows necessary collaboration without leaving a credential vulnerable indefinitely. Changing the password after sharing minimizes the window of opportunity for misuse and keeps access under current authorization. The other options don’t fit this balance: sharing with no change keeps the same credentials forever, increasing risk; never sharing would block legitimate teamwork; and requiring supervisor approval adds a constraint not specified here and could impede urgent collaboration, whereas the policy supports sharing when needed, with a post-sharing change.

Password-sharing practices and the requirement to change credentials after sharing are being tested. The correct statement reflects a controlled approach: colleagues may share a password when access is needed for a task, but the password must be changed afterward. This ensures that the temporary access is time-limited and that accountability is preserved—the person who shared the password no longer has ongoing access once the password is updated, and the new user can be tracked under the new credential.

Why this is best: it allows necessary collaboration without leaving a credential vulnerable indefinitely. Changing the password after sharing minimizes the window of opportunity for misuse and keeps access under current authorization.

The other options don’t fit this balance: sharing with no change keeps the same credentials forever, increasing risk; never sharing would block legitimate teamwork; and requiring supervisor approval adds a constraint not specified here and could impede urgent collaboration, whereas the policy supports sharing when needed, with a post-sharing change.