Q72
Single choice
A security administrator configured the account policies per security implementation guidelines. However, the accounts still appear to be susceptible to brute-force attacks. The following settings meet the existing compliance guidelines:
1. Must have a minimum of 15 characters
2. Must use one number
3. Must use one capital letter
4. Must not be one of the last 12 passwords used
Which of the following policies should be added to provide additional security?