A security administrator is concerned about the strength of user's passwords. The company does not want to implement a password complexity policy. Which of the following can the security administrator implement to mitigate the risk of an online password attack against users with weak passwords?

A security administrator is concerned about the strength of user's passwords. The company does not want to implement a password complexity policy. Which of the following can the security administrator implement to mitigate the risk of an online password attack against users with weak passwords?

A. Increase the password history
B. Increase the password length requirements
C. Shorten the password expiration period
D. Decrease the account lockout time

Answer
C. Shorten the password expiration period