Which of the following describes a GPO's password policy capability?

• A. They only enforce password length
• B. They determine password length, reuse rules, and other criteria
• C. They never enforce reuse rules
• D. They are decided by users

Answer: (B)

Group Policy Objects give admins a centralized way to enforce password requirements across a Windows domain. Through a GPO, you can set the minimum password length, enforce complexity, specify how many previous passwords cannot be reused, and impose rules about password aging and lockout. This means the policy covers length, reuse rules, and other criteria, which is why this option best describes a GPO’s password policy capability. GPOs manage more than just length, they enforce reuse rules via password history, and these settings are configured by administrators rather than chosen by users.