An auditing team has found that passwords do not meet best business practices. Which of the following will MOST increase the security of the passwords? (Select TWO).

The correct answer is A. Password Complexity D. Password Length. Password strength is fundamentally determined by the size of the search space an attacker must cover. Password length directly expands this search space exponentially - each additional character multiplies the number of possible combinations. Password complexity (requiring upperc

General security concepts

Question

Options

APassword Complexity
BPassword Expiration
CPassword Age
DPassword Length
EPassword History

How the community answered

(22 responses)

A
95% (21)
E
5% (1)

Explanation

Password strength is fundamentally determined by the size of the search space an attacker must cover. Password length directly expands this search space exponentially - each additional character multiplies the number of possible combinations. Password complexity (requiring uppercase, lowercase, numbers, and symbols) dramatically increases the character set per position, further multiplying possible combinations. Together, length and complexity have the greatest direct impact on making passwords resistant to brute-force and dictionary attacks. Password expiration, age, and history are lifecycle management controls that are useful for preventing reuse but do not make any individual password stronger or harder to crack.

Topics

#password policy#password complexity#password length#authentication

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice