An OSC has an established password policy. The OSC wants to improve its password protection security by implementing a single change .
Which of the following is an acceptable element to add to the OSC’s password policy?
Require passwords to be changed every 18 months.
Require passwords to be 5 to 7 characters long.
Add the use of salted two-way cryptographic hashes of passwords.
Add the use of salted one-way cryptographic hashes of passwords, where possible.