An internal auditing team would like to strengthen the password policy to support special
characters. Which of the following types of password controls would achieve this goal?

A.
Add reverse encryption

B.
Password complexity

C.
Increase password length

D.
Allow single sign on

Explanation:
Generally, the minimum password length is considered to be 8 upper and lowercase characters.
The use of at least one non-alpha character like punctuation, special characters, or numbers,

combined with the password length produces strong passwords. Strong passwords are produced
by the combination of a password’s length and complexity.