A user attempts to log in to a website and receives a prompt to update...

This scenario describes a policy where the system enforcespassword expiration, prompting users to update passwords after a defined period.

“Password expiration is a security policy that requires users to reset their passwords periodically—commonly 30, 60, or 90 days—to mitigate the risk of compromised credentials.” — CompTIA ITF+ Objectives

Password privacyrefers to keeping the password confidential.

Password historyrestricts reuse of old passwords.

Password complexityenforces character rules (e.g., uppercase, numbers, symbols).

Correct answer: D