Which of the following excerpts would come from a corporate policy?

Specifying a minimum password length of eight characters with one alphanumeric character is a technical password standard - it defines specific, measurable requirements that belong in a standards document rather than a high-level policy.

Providing a help desk contact number for password resets is procedural or reference documentation, not a binding policy statement that governs organizational system behavior.

Directing employees to use 'strong passwords' is characteristic of a guideline, which offers general recommendations without mandating specific technical implementations, and therefore lacks the binding authority of a policy.

Corporate policies establish binding organizational directives that govern system and operational behavior across the enterprise. Stating that corporate systems must store passwords using a specific algorithm (MD5) is a system-level mandate written in the authoritative tone of a policy document. While MD5 is cryptographically weak for password storage, as a structural excerpt it matches the format and authority level of a corporate policy rather than a guideline or procedural reference.