A security administrator wants to check user password complexity. Which of the following is the
BEST tool to use?

A.
Password history

B.
Password logging

C.
Password cracker

D.
Password hashing

Explanation:
The most important countermeasure against password crackers is to use long, complex passwords, which
are changed regularly. Password-cracking tools compare hashes from potential passwords with the
hashes stored in the accounts database. Each potential password is hashed, and that hash value is
compared with the accounts database. If a match is found, the password-cracker tool has discovered a
password for a user account.
Incorrect Answers:
A: Password History tracks previous passwords so as to prevent password reuse. It does not check
password complexity.
B: Password logging will not check password complexity.
D: Passwords are usually stored in a hashed format. It does not check password complexity.
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 292, 318