The statement 'Users should select very long and complex passwords and use the same password at all sites for auditability' is true.

• A. True
• B. False
• C. It depends
• D. Not enough information

Answer: (B)

Using the same password across sites undermines auditability and security. While having long and complex passwords is beneficial for resisting guessing and brute-force attacks, reusing that password everywhere means a breach at one site can unlock accounts at all others. That breaks the ability to reliably tie actions to a single user and makes password resets and revocation much harder. For proper auditability, each service should have its own strong credential, ideally managed with a password manager, plus multi-factor authentication and centralized logging. So the statement is not true.