Exam SSCP topic 1 question 23 discussion

Just for a Lol, I think my decision would come down to Company Policy. If the password needs to be reset every 3 months (and the policy is you can't record passwords), I'm choosing "B: Christmas12". But the best answer would be C, A, & B "Jenny Christmas12 Holiday". But on the Test, I'll choose D. Because I can only choose one, but I can't remember what that password was now. :-D

Entropy doesn't matter if a dictionary attack can scope out the password quickly from a list. It negates any measure of time needed to try and figure out a combination, thus making entropy a useless statistic in this case. Therefore, D is the applicable answer here. (Note: however, passphrase based passwords seek to reinstate that entropy while enabling it to be "human readable" and may not apply in the context of this scenario)

The number of possible combinations in "Christmass12" is 62 on the power of 11, which is much bigger than, number of combinations in GyN19Za! which is 94 on power of 8, and if it is a brute force attack, the Christmass12 is more difficult to brake. However in dictionary attack, GyN19Za! is more resistible.

Christmas12 has the highest entropy though?