A company's password policy requires a minimum length of 14 characters with complexity (uppercase, lowercase, numbers, and special characters). Users find these passwords difficult to remember and frequently reset them. Which alternative approach would BEST enhance security while reducing the user burden?

Require the use of a password manager and enable single sign-on for all applications.

Password managers help, but users still need a strong master password; this does not directly address password memorization for every login.

Reduce the minimum password length to 8 characters while enforcing standard complexity requirements.

Shortening the length reduces security against brute-force attacks.

Replace passwords with biometric authentication, such as fingerprint or facial recognition.

Biometrics can be used as a factor but are not a complete replacement for passwords in most corporate environments.

What does this 220-1102 question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: Implement a passphrase policy that allows spaces and longer combinations of common words. — A passphrase policy that allows longer phrases (e.g., 'correct-horse-battery-staple') is both easier to remember and more resistant to brute-force attacks than a short complex password. While password managers are a good practice, they do not reduce the user memory burden for every login since users still need to remember the master password. Biometrics can complement but not replace passwords entirely. Decreasing the minimum length would weaken security.

What should I do if I get this 220-1102 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.