Which Password Policy setting enforces compliance with password complexity requirements?

Which Password Policy setting enforces compliance with password complexity requirements?

• A. Passwords must meet complexity requirements
• B. Passwords must be non-repeating
• C. Maximum password age
• D. Password length minimum

Answer: (A)

Enforcing a password’s complexity means the policy requires using a mix of character types—uppercase and lowercase letters, numbers, and symbols—so passwords are harder to guess. The option that says passwords must meet complexity requirements directly enforces this rule, making it the best choice for ensuring true complexity. Other policies don’t achieve that goal as clearly: non-repeating characters would limit repeating a specific character but doesn’t mandate a variety of types; maximum password age only controls when a password expires, not how complex it is; and a minimum length sets a size floor but doesn’t ensure the mix of character types that complexity requirements enforce.

Enforcing a password’s complexity means the policy requires using a mix of character types—uppercase and lowercase letters, numbers, and symbols—so passwords are harder to guess. The option that says passwords must meet complexity requirements directly enforces this rule, making it the best choice for ensuring true complexity.

Other policies don’t achieve that goal as clearly: non-repeating characters would limit repeating a specific character but doesn’t mandate a variety of types; maximum password age only controls when a password expires, not how complex it is; and a minimum length sets a size floor but doesn’t ensure the mix of character types that complexity requirements enforce.