Universal Containers wants to increase the security of their org by requiring stricter user passwords. Which two of the following should an administrator configure? Choose 2 answers

While preventing common words is a good security practice, it is not a standard, declaratively configurable option directly within Salesforce password policies, which primarily focus on length and character types.

'Password different than username' is a security best practice and often implicitly enforced or recommended, but it's not a distinct, separate configuration option in Salesforce's password policy settings like length or complexity.

Configuring a minimum password length ensures that users create longer passwords, which are generally more difficult to guess or crack, thereby increasing security.

Setting password complexity requirements, such as including a mix of uppercase, lowercase, numbers, and special characters, makes passwords much stronger and harder to brute-force.