Northern Trail Outfitters wants to encourage employees to choose secure and appropriate passwords for their Salesforce accounts. Which three password policies should an administrator configure? Choose 3 answers

To enhance password security, a Salesforce administrator can configure several settings within the org's Password Policies. Setting password complexity requirements ensures that users create strong passwords with a mix of character types. Defining the number of days until expiration forces regular password changes, mitigating the risk of compromised credentials over time. Configuring the maximum invalid login attempts protects accounts from brute-force attacks by locking out users after a specified number of failed attempts. These three policies work together to enforce the creation and maintenance of secure passwords.

B. Prohibited password values: Salesforce does not have a standard feature to create a custom list of prohibited passwords (e.g., "password123," "companyname").
C. Require use of Password Manager App: Salesforce cannot enforce the use of an external application like a password manager; this is an internal company IT policy, not a configurable Salesforce setting.

1. Salesforce Help, "Set Password Policies": This document details all configurable password policies for a Salesforce org.

Password History, Length, and Complexity: This section describes the "Password complexity requirement" setting (Answer D).

Password Expiration: This section details the "User passwords expire in" setting (Answer E).

Login Lockout Settings: This section explains the "Maximum invalid login attempts" and "Lockout effective period" settings (Answer A).

2. Trailhead, Salesforce Administrator Trail, "Control Access to the Org" Module, "Set Password Policies and User Locking" Unit: This official training module outlines the key password policies an administrator can set to secure an org.

Under the "Set Password Policies" section, it explicitly lists and describes setting password expiration, complexity, and length.

Under the "Lock Users Out" section, it details the configuration for "Maximum invalid login attempts."