An organization's security policy mandates the use of passwords that are difficult to guess or brute-force. Which of the following password criteria would BEST align with this policy objective?
Exactly 8 characters, containing uppercase and lowercase letters and numbers
At least 9 characters, containing uppercase and lowercase letters only
At least 10 characters, containing uppercase letters and numbers only
At least 12 characters, containing uppercase and lowercase letters, numbers, and special characters