Which of the following should be incorporated into a reasonably secure password policy that balances security with usability? Check all that apply.
O A length of at least 8 characters
O A requirement to use dictionary words
O A password expiration time of 6-12 months
O A complexity requirement of special characters and numbers