What is the purpose of implementing a strong password policy?

• A. To reduce password length.
• B. To enable single sign-on.
• C. To enhance security by making unauthorized access more difficult.
• D. To standardize password storage across systems.

Answer: (C)

A strong password policy aims to raise the bar for attackers by ensuring users create passwords that are harder to guess and harder to crack. By enforcing longer passwords and a mix of character types, it slows down brute-force and dictionary attacks and reduces the chance of password reuse across systems. It also helps prevent the use of common or easily guessable passwords, which are frequent targets. Policies that encourage or require regular changes and account lockouts can limit the window of opportunity if a password is compromised. This kind of policy focuses on how passwords are created and managed by users, not on how passwords are stored or on other authentication mechanisms. Reducing password length would weaken security, single sign-on relates to centralized authentication across services, and storing passwords is a separate technical control (hashing/other storage methods) rather than a user-create-password policy.