CompTIA Security+ (SY0-701) SY0-701 — Question 546

A security analyst needs to improve the company’s authentication policy following a password audit. Which of the following should be included in the policy? (Choose two.)