Question

What is not a best practice for password policy?

(a) Deciding maximum age of password

(b) Restriction on password reuse and history

(c) Password encryption

(d) Having change password every 2 years

This question was posed to me at a job interview.

This question is from Security in division Security of Operating System

Answer 1

The correct option is (d) Having change password every 2 years

Explanation: Old passwords are more vulnerable to being misplaced or compromised. Passwords should be changed periodically to enhance security.