From the course: CISSP Cert Prep (2021): 5 Identity and Access Management

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Password policies

Password policies

From the course: CISSP Cert Prep (2021): 5 Identity and Access Management

Start my 1-month free trial

Password policies

“

- [Instructor] Passwords are among the most common authentication mechanisms and it's important to ensure that passwords remain secure. Administrators may use group policy objects to securely configure passwords to require good password practices by end users. Some password requirements exist to make sure that passwords are difficult to guess and resistant to brute force attacks. The first of these is a password length requirement. Best practice says that passwords should be at least eight characters long, although some organizations require even longer passwords. The second requirement that makes passwords complex and difficult to guess is requiring that they include different types of characters such as uppercase characters, lowercase characters, digits and symbols. Now one important note, best practice is changing in this area. The most recent guidance from NIST suggests that users should be allowed to use a variety…

Contents