TestOut LabSim A+ Certification Practice Exam

Which password setting restricts unauthorized transactions on a device?

1. User account control

2. Password expiration

3. Complexity requirements

4. Account lockout policy

The correct answer is: Complexity requirements

Complexity requirements are designed to enhance security by enforcing specific criteria that passwords must meet, such as having a minimum length, including uppercase and lowercase letters, numbers, and special characters. By ensuring that passwords are difficult to guess or crack, complexity requirements significantly minimize the risk of unauthorized access to a device or system, thereby helping to restrict unauthorized transactions. This approach makes it much harder for malicious actors to exploit weak or easily guessable passwords, thus directly addressing security concerns related to unauthorized activities. In contrast, other options do provide important security measures in their own right, but they serve different purposes. For example, user account control deals with managing permissions for installing software and making system changes, while password expiration requires users to change their passwords periodically but does not necessarily prevent unauthorized access if the passwords are weak. Account lockout policies help prevent brute force attacks by locking accounts after a set number of failed login attempts, but they do not inherently ensure that the passwords themselves are strong.