Which of the following describes the password requirements?

Which of the following describes the password requirements?

• A. Must include at least one special character.
• B. Must only contain numbers.
• C. Minimum seven characters with alphabetic characters only.
• D. Minimum seven characters with both numeric and alphabetic characters.

Answer: (D)

Strong passwords come from both adequate length and a mix of character types. PCI DSS requires passwords to be at least seven characters long and to include both numeric and alphabetic characters. This combination makes guessing or brute-force attacks much harder than using only letters or only numbers, or relying on length alone. The option that specifies a minimum seven characters with both numeric and alphabetic characters best matches that requirement. The other choices fall short because they rely on only one type of character or ignore the need for a numeric/letter mix.

Strong passwords come from both adequate length and a mix of character types. PCI DSS requires passwords to be at least seven characters long and to include both numeric and alphabetic characters. This combination makes guessing or brute-force attacks much harder than using only letters or only numbers, or relying on length alone. The option that specifies a minimum seven characters with both numeric and alphabetic characters best matches that requirement. The other choices fall short because they rely on only one type of character or ignore the need for a numeric/letter mix.