Which statement about a passphrase is correct?

• A. Protects from keystroke loggers
• B. Is a mnemonic to remember a password
• C. Is immune to social engineering
• D. Needs to changed weekly

Answer: (B)

A passphrase is designed to be long and memorable, typically formed from words or a simple sentence to make it easier to recall while increasing the difficulty for attackers to guess. This is why it’s described as a mnemonic to remember a password: you create a phrase or cue that helps you recall a strong credential. It’s not inherently protective against keystroke loggers, since a logger records whatever you type regardless of length. It’s also not immune to social engineering, because someone could still trick you into revealing it. And requiring it to be changed weekly isn’t a defining feature of what a passphrase is; it’s a policy choice that doesn’t reflect the concept itself. So the best description is that a passphrase serves as a mnemonic to remember a password.