IAM Password Policies Quiz

What you'll be asked

1. What is the primary purpose of implementing a strong IAM password policy?
2. When configuring password expiration policies, which of the following is considered a modern security best practice?
3. A company wants to prevent users from reusing their previous passwords. Which IAM setting should be configured?
4. What is the most significant security disadvantage of setting an extremely short 'Account Lockout Duration' policy?
5. In a distributed environment with federated identity, how should you manage password policies for users logging in via an external Identity Provider (IdP)?

Answers and explanations come after you submit.