More than 90 days have elapsed since a user created an account for a banking...

As per the CompTIA Tech+ Study Guide (Exam FC0-U71, 3rd Edition, 2025):

“Some companies’ IT policies require that you change or reset your password at regular intervals, such as every 90 days. The rationale for having a password expiration policy is that the longer you keep a password, the more likely it is that someone has seen it or written it down.”

The guide further notes:

“Many companies have password policies in place that enforce strict requirements… The policy can also make users reset their password every so often, such as 90 days.”

This describes password expiration, which ensures that passwords are periodically updated to reduce security risks.

Verified Reference:

Chapter 11: Security Best Practices — “Password Changes” (pp. 596–598).