A security administrator must implement all requirements in the following corporate policy:
Passwords shall be protected against offline password brute force attacks.
Passwords shall be protected against online password brute force attacks.
Which of the following technical controls must be implemented to enforce the corporate policy?
(Select THREE).

A.
Account lockout

B.
Account expiration

C.
Screen locks

D.
Password complexity

E.
Minimum password lifetime

F.
Minimum password length