Exam SY0-501 topic 1 question 182 discussion

password = complex passphrase - length

In order to PROMOTE the use of passphrases, you'll have to enforce a certain length of password, this will promote/encourage people to use a lengthy passphrase.

Based on NIST's guidance link below best answer is length. https://www.isaca.org/resources/isaca-journal/issues/2019/volume-1/nists-new-password-rule-book-updated-guidelines-offer-benefits-and-risk

Like passwords but made of phrases. A passphrase is a sequence of words or other text used to control access to a computer system, program or data. A passphrase is similar to a password in usage, but is generally longer for added security.

Study Guide said below: In addition to password complexity, there will be related issues such as password length. The rule is the longer, the better. Passphrases are becoming more common. Beyond using a series of words or other text to control access, passphrases are generally longer in order to provide additional security. I think B makes more sense to me as it has longer lenth > then leading to great complexity.

FBI recommends passphrases over password complexity Longer passwords, even consisting of simpler words or constructs, are better than short passwords with special characters.

length is the right answer

Length (B) is the correct answer. Just took the Sec+ exam.

This should be length. Found the same question in another practice exam and length was the answer

It is Length. "Instead of using a short, complex password that is hard to remember, consider using a longer passphrase," the FBI said. "This involves combining multiple words into a long string of at least 15 characters," it added. "The extra length of a passphrase makes it harder to crack while also making it easier for you to remember." https://www.zdnet.com/article/fbi-recommends-passphrases-over-password-complexity/#:~:text=%22Instead%20of%20using%20a%20short,15%20characters%2C%22%20it%20added.

A passphrase is a sequence of words or other text used to control access to a computer system, program, or data. A passphrase is like a password in usage but is generally longer for added security.

Complexity doesn't guarantee the use of passphrases. The answer should be length in my opinion since a passphrase is secure and lengthy.

Should be B (Length). Password security increases with length, not necessarily with complexity, particularly because complex passwords often trigger "memory aids" (e.g. password are being written down).

B. Length ...A passphrase can also contain symbols, and does not have to be a proper sentence or grammatically correct. The main difference of the two is that passwords do not have spaces while passphrases have spaces and are longer than any random string of letters... The use of punctuation, upper and lower cases in Passphrases also meets the complexity requirements for passwords... Source: https://www.passworddragon.com/password-vs-passphrase

«...MUST be in place...» A minimum length tech control MUST be in place to use passphrases.

its length now.

passphrase=length password=complexity answer is B