A user attempts to log in to a website and receives a prompt to update...

This scenario describes a policy where the system enforces password expiration, prompting users to update passwords after a defined period.

“Password expiration is a security policy that requires users to reset their passwords periodically—commonly 30, 60, or 90 days—to mitigate the risk of compromised credentials.” — CompTIA ITF+ Objectives

Password privacy refers to keeping the password confidential.

Password history restricts reuse of old passwords.

Password complexity enforces character rules (e.g., uppercase, numbers, symbols).

Correct answer: D