After a recent internal audit, the security administrator was tasked to ensure that all credentials must be changed within 90 days, cannot be repeated, and cannot contain any dictionary words or…

Account recovery options relate to methods for regaining access to a locked or forgotten account and are not described in this policy.

User assigned privileges refer to specific permissions granted to individual accounts and are unrelated to credential management policies.

Account lockout disables an account after a set number of failed attempts - the policy explicitly states credentials remain enabled regardless of the number of attempts, meaning lockout is not enforced.

Account disablement refers to deactivating accounts (e.g., upon employee termination) and is not part of the described credential policy.

Group based privileges define permissions inherited through group membership and are unrelated to password management policies.

Password expiration policies enforce a maximum credential lifetime, requiring users to change their passwords after a defined period - in this case 90 days - and prevent reuse of previous passwords.

Password complexity requirements mandate that passwords meet specific construction rules such as avoiding dictionary words, common patterns, or repeated characters, making credentials harder to guess or crack through automated attacks.