Which of the following controls BEST ensures a user creates a complex password?

Operating system rules can be configured to enforce password complexity requirements. These rules

can specify the minimum length, complexity, and expiration of passwords. By setting these

parameters, the operating system ensures that users create passwords that are difficult to guess or

crack, thus enhancing security.

Multi-factor authentication (B) adds an additional layer of security but does not directly ensure the

creation of complex passwords. Information security awareness © is crucial for educating users

about the importance of complex passwords but does not enforce their creation. Biometrics (D) is an

alternative form of authentication that may replace or supplement passwords but does not govern

their complexity.

Reference: The information provided here is based on standard cybersecurity practices and

principles, which are likely to be consistent with those found in ISACA’s Cybersecurity Audit

resources. For specific

, please consult the ISACA Cybersecurity Audit Manual or related

study guides12.