303-300 · Question #15
Which PAM module checks new passwords against dictionary words and enforces complexity? (Specially the module name only without any path.) Solution: pam_cracklib Determine whether the given solution…
The correct answer is A. Correct. Option A is correct because pam_cracklib is the Linux PAM (Pluggable Authentication Modules) module specifically designed to check passwords against dictionary words and enforce complexity rules such as minimum length, character classes (uppercase, lowercase, digits, symbols)…
Question
Which PAM module checks new passwords against dictionary words and enforces complexity? (Specially the module name only without any path.) Solution: pam_cracklib Determine whether the given solution is correct?
Options
- ACorrect
- BIncorrect
How the community answered
(19 responses)- A89% (17)
- B11% (2)
Explanation
Option A is correct because pam_cracklib is the Linux PAM (Pluggable Authentication Modules) module specifically designed to check passwords against dictionary words and enforce complexity rules such as minimum length, character classes (uppercase, lowercase, digits, symbols), and sequence checks. It integrates with the CrackLib library, which maintains a dictionary of common/weak passwords for comparison.
There are no distractors here - this is a single-answer question where only the provided solution (pam_cracklib) is evaluated, and it is accurate.
Memory tip: Think "crack" in pam_cracklib as in "crack a password" - this module exists precisely to prevent passwords that could be easily cracked by dictionary or brute-force attacks. The "lib" suffix reminds you it leverages the CrackLib library under the hood. On modern systems (especially RHEL/CentOS 7+), pam_pwquality has largely replaced pam_cracklib, but pam_cracklib remains the classic exam answer for this functionality.
Topics
Community Discussion
No community discussion yet for this question.