What is the primary purpose of a password policy?

Question

Options

• ATo require users to write down their passwords for easy retrieval
• BTo ensure users have a unique password for every system
• CTo allow users to share passwords for convenience
• DTo enforce the use of strong, complex passwords and periodic password changes

• A
  4% (2)
• B
  2% (1)
• D
  94% (48)

Explanation

The primary purpose of a password policy is to enforce the use of strong, complex passwords and require periodic password changes to reduce the risk of unauthorized access. Strong passwords resist brute-force and dictionary attacks, while periodic changes limit the window of exposure if a password is compromised. Option A (writing down passwords) is a serious security anti-pattern. Option C (sharing passwords) violates the principle of individual accountability. Option B (unique password per system) is a good practice related to password reuse, but the core purpose of a password policy is about strength and change requirements.

No community discussion yet for this question.