While Reviewing the Security Controls in Place for a Web-Based

question 675

Multiple Choice

While reviewing the security controls in place for a web-based application, a security controls assessor notices that there are no password strength requirements in place. Because of this vulnerability, passwords might be easily discovered using a brute force attack. Which of the following password requirements will MOST effectively improve the security posture of the application against these attacks? (Select two)

• A) Minimum complexity
• B) Maximum age limit
• C) Maximum length
• D) Minimum length
• E) Minimum age limit
• F) Minimum re-use limit

---

Definitions:

Times Interest Earned

is a financial ratio that compares a company's income before interest and taxes (EBIT) to its interest expenses, indicating how well the company can cover its interest obligations.

Debt-To-Equity Ratio

A formula displaying the relative use of debt and equity from shareholders in the financial strategy for a company's assets.

Average Collection Period

calculates the average number of days it takes for a business to receive payments from its customers for invoices issued.

Times Interest Earned

A financial ratio that measures a company's ability to meet its debt obligations by comparing its income before interest and taxes to its interest expenses.