Which of the following are recommendations for setting and changing passwords? Choose all that apply.

A.
The same passwords should not be used for administrator accounts and personal accounts.

B.
If a strong, difficult to guess password is set, you do not have to change it.

C.
There must be a clear distinction between administrator accounts and normal company employee accounts.

D.
A password should consist of a combination of numbers, letters and special characters.

Explanation:
When setting passwords, you should never use the same passwords for administrator accounts and personal accounts. There has to be a clear distinction between administrator accounts and normal company employee accounts. Strong passwords are those that consist of a combination of numbers, letters and special characters.
Incorrect Answers:
B: You should always regularly change passwords. You should always set strong, difficult to guess passwords.
References:
Charles J. Brooks, Server+ Certification Exam Cram 2 (Exam SK0-002), QUE Publishing, Indianapolis, 2006, pp. 457-458.