A security analyst needs to improve the company’s authentication policy following a password audit. Which of the following should be included in the policy? (Ch...