What is the BEST way to ensure users comply with organizational security requirements for
password complexity?
A.
Include password construction requirements in the security standards
B.
Require each user to acknowledge the password requirements
C.
Implement strict penalties for user noncompliance
D.
Enable system-enforced password configuration
Explanation:
Automated controls are generally more effective in preventing improper actions. Policies and
standards provide some deterrence, but are not as effective as automated controls.