$4\mathrm{.}5$ Information Security Controls

Tim is the head of an organization's information system security team. He has been asked to give a training presentation to all employees on information security controls. On Tim's presentation slide dealing with using strong passwords, which of the following tips would appear?

Passwords should be difficult to guess; use common words; and use family and pet names or birthdays.

Passwords should be difficult to guess; use unrecognizable words; and do not use family and pet names or birthdays.

Passwords should be long and not contain any special characters or uppercase letters.

Passwords should use special characters, lowercase letters, and recognizable words.