ITPEC IP October 2024 Question 40

Password policy — the rules for the character types, length and other conditions of passwords.

A password policy is the set of rules an organisation or system enforces for passwords, such as minimum length, mixing upper and lower case, digits and symbols, expiry period and no reuse of old passwords. It makes passwords harder to guess or crack.

Answer (c)

Why not others:

• •(a) Single sign-on — one authentication gives access to several systems; it sets no rules for password content
• •(b) Password crack — an attack that tries to discover passwords, the thing a policy defends against
• •(d) One-time password — a password valid for one login only, a type of authentication, not a rule set

Key rule: Rules for how passwords must be formed are a policy; SSO and one-time passwords are authentication methods, and cracking is the attack.

Security · AI-written, may contain errors