Which two of the following should an administrator configure?

Universal Container wants to increase the security of their org by requiring stricker user passwords.

Which two of the following should an administrator configure? Choose 2 answers
A . Password different then username
B . Prevent common words
C . Minimum password length.
D . Password complexity requirement.

Answer: C, D

Explanation:

Minimum password length and password complexity requirement are two settings that administrators can configure to increase the security of user passwords in Salesforce. They determine how long and how complex the passwords must be to meet the security standards. Password different than username and prevent common words are not valid settings in Salesforce, although they are good practices for creating strong passwords.

Reference: https://help.salesforce.com/s/articleView?id=sf.admin_password_policies.htm&type=5