Universal Container wants to increase the security of their org by requiring stricker user passwords. Which two of the following should an administrator configure? Choose 2 answers

While preventing username-as-password is a useful toggle in Salesforce password settings, it is a single binary option and not one of the primary configurable strengthening mechanisms.

Salesforce does not natively offer a 'prevent common words' option in its standard Password Policies settings.

Minimum password length is a configurable setting under Security Controls - Password Policies that directly strengthens passwords by requiring a minimum number of characters, reducing vulnerability to brute-force attacks.

Password complexity requirements force users to include a mix of alphabetic, numeric, and special characters, making passwords significantly harder to guess or crack.