Company policy requires the use if passphrases instead if passwords. Which of the following technical controls MUST be in place in order to promote the use of passphrases?

Password reuse policies prevent the repeated use of old credentials, which is a general security practice but does not specifically promote the initial creation or adoption of passphrases over other password types.

While a minimum length requirement is crucial for passphrase strength, 'Complexity' is the broader technical control category where specific rules, including minimum length, character allowances, and overall strength metrics, are defined to manage and promote acceptable credentials.

Password history policies prevent users from re-using recently used passwords, which is a general security measure that does not directly encourage the creation of new passphrases.

Password complexity policies define the overall strength requirements for user credentials, which encompass factors like minimum length, allowed character sets (e.g., spaces for passphrases), and entropy evaluation. Properly configuring this complexity control ensures that long, memorable passphrases are accepted by the system and meet the necessary security standards, thereby promoting their adoption.