The IT department must ensure previously used passwords cannot be reused when users change their passwords. Which of the following password policies should be enforced to meet this requirement?…

The correct answer is B. Password history E. Minimum password age. These two policies work together to prevent password reuse effectively. Password history (B) stores a record of a user's previously used passwords and prevents them from reusing any password in that history list (e.g., the last 10 passwords). However, without a minimum password…

Hardware and network troubleshooting

Question

The IT department must ensure previously used passwords cannot be reused when users change their passwords. Which of the following password policies should be enforced to meet this requirement? (Select TWO.)

Options

APassword complexity
BPassword history
CPassword length
DMaximum password age
EMinimum password age
FLockout threshold

How the community answered

(55 responses)

B
87% (48)
C
4% (2)
D
2% (1)
F
7% (4)

Explanation

These two policies work together to prevent password reuse effectively. Password history (B) stores a record of a user's previously used passwords and prevents them from reusing any password in that history list (e.g., the last 10 passwords). However, without a minimum password age (E), a user could immediately change their password multiple times in rapid succession to cycle through enough passwords to exhaust the history list and arrive back at their original password. The minimum password age enforces how long a user must keep their current password before changing it again, blocking this cycling workaround. Together, these two policies form a complete defense against password reuse. The other options (complexity, length, maximum age, lockout threshold) address different security goals.

Topics

#password history#minimum password age#password policy#account security

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice