セキュリティアナリストは、パスワード監査後に会社の認証ポリシーを改善する必要があります。ポリシーに含める必要があるのは次のうちどれですか? (2 つ選択してください)。
正解:A,B
A strong authentication policy should enforcepassword length(e.g., minimum of 12-16 characters) andcomplexity(mix of uppercase, lowercase, numbers, and symbols). These measures significantlyreduce the risk of brute-force attacks.
Least privilege (C)relates to access control, not authentication policies.
Something you have (D)andbiometrics (F)pertain to multi-factor authentication (MFA) but are not password policy requirements.
Reference:CompTIA Security+ SY0-701 Official Study Guide, General Security Concepts domain.