Which PAM module checks new passwords against dictionary words and enforces complexity?

Question

Options

• Apam_complexity
• Bpam_securepw
• Cpam_cracklib
• Dpam_dictionary

• A
  3% (1)
• B
  3% (1)
• C
  92% (35)
• D
  3% (1)

Explanation

pam_cracklib is the correct answer because it is a well-established PAM module that checks new passwords against dictionary words and enforces complexity rules (minimum length, character classes, etc.) - it is widely used on Linux systems and has been the standard for this purpose for decades. pam_complexity (A) does not exist as a real PAM module; it is a fabricated name designed to sound plausible. pam_securepw (B) is similarly fictional - no standard PAM module by that name exists. pam_dictionary (D) does not exist either; while it sounds like it would check dictionaries, the actual dictionary-checking functionality lives inside pam_cracklib (or its modern successor pam_pwquality).

Memory tip: Think "crack" as in cracking weak passwords - pam_cracklib is the module that prevents password cracking by rejecting dictionary words and weak patterns. If you see a newer exam reference pam_pwquality, know that it replaced pam_cracklib on modern systems but serves the same purpose.

No community discussion yet for this question.