An administrator would like to use a passphrase for their ESXi 6.x hosts which has these characteristics: - Minimum of 21 characters - Minimum of 2 words Which advanced options must be set to allow…

Question

Options

• Aretry=3 min=disabled, disabled, 7, 21, 7 passphrase=2
• Bretry=3 min=disabled, disabled, 21, 7, 7 passphrase=2
• Cretry=3 min=disabled, disabled, 2, 21, 7
• Dretry=3 min=disabled, disabled, 21, 21, 2

• A
  8% (2)
• B
  85% (22)
• C
  4% (1)
• D
  4% (1)

Explanation

ESXi 6.x uses pam_passwdqc, which accepts a min parameter with five comma-separated values in the format min=N0,N1,N2,N3,N4 corresponding to minimum lengths for: (N0) 1 character class, (N1) 2 character classes, (N2) passphrases, (N3) 3 character classes, and (N4) 4 character classes. The passphrase=M parameter sets the minimum number of words required for a passphrase. To require passphrases of at least 21 characters and at least 2 words, N2 must be set to 21 and passphrase must be set to 2. Option B - retry=3 min=disabled,disabled,21,7,7 passphrase=2 - correctly places 21 in the N2 (passphrase) position and sets passphrase=2 for the 2-word minimum. Option A incorrectly places 7 in the N2 position and 21 in the N3 position, which would enforce a 21-character minimum only on 3-class passwords, not on passphrases.

No community discussion yet for this question.