If you suspect a password has been compromised, what action is recommended?

• A. Report immediately.
• B. Change the password on the affected account only.
• C. Share the compromised password with a colleague.
• D. Continue using the same password.

Answer: (A)

The key idea is that prompt reporting starts a formal incident response so the organization can contain the breach and protect accounts. When you report immediately, security teams can revoke compromised credentials, review access logs, assess scope, and guide you through comprehensive remediation—like resetting passwords across all services and enabling stronger controls such as MFA. Changing the password on just one affected account may miss other places the attacker gained access, or existing sessions that remain valid. Sharing the password or continuing to use the same password keeps the risk alive and should be avoided. So, report immediately to kick off a coordinated response.