A system administrator has noticed that users change their password many times to cycle back to the original password when their passwords expire. Which of the following would BEST prevent this behavi

Assigning passwords based on job role does not prevent a user from changing their password back to a previous one once they gain the ability to change it.

Password history settings prevent reuse of a set number of previous passwords, but without a minimum password age, a user can change their password rapidly in succession, cycling through the required history count in minutes and returning to their original password. Enforcing a minimum password age - typically 1 day - prevents this by requiring the user to wait before each change, making cycling through history impractical. Together, minimum password age and password history form the complete defense against this behavior.

Preventing users from choosing their own passwords would require administrative overhead for every change and does not scale, and still does not inherently prevent cycling if users influence the process.

Increasing the password expiration timeframe gives users more time between required changes but does not stop them from cycling through history immediately after a change is triggered.