CompTIA PenTest+ PT0-002 Practice Question

The correct answer is 'False'. Modern security practices suggest that simply enforcing a minimum character length, such as 8 characters, is not sufficient for securing accounts. Password complexity, which involves the use of upper and lowercase letters, numbers, and special characters, as well as password rotation policies, significantly reduce the risk of compromise. Additionally, current recommendations advocate for longer passwords that are easier to remember – often called passphrases – and these are generally longer than the outdated eight-character minimum. Moreover, excessive rotation policies can lead to weaker passwords or insecure practices like writing them down, thus a balance must be found.