A recent online password audit has identified that stale accounts are at risk to brute force attacks. Which
the following controls would best mitigate this risk?

A.
Password length

B.
Account disablement

C.
Account lockouts

D.
Password complexity