A password policy requires at least 8 characters and includes uppercase, lowercase, and digits. Which statement is true?

• A. It contains uppercase
• B. It contains digits
• C. Both A and B
• D. None

Answer: (C)

The key idea is that a password policy often requires multiple character types and a minimum length. Since the policy specifies at least eight characters and the inclusion of uppercase letters, lowercase letters, and digits, any compliant password must contain at least one uppercase letter and at least one digit (in addition to at least one lowercase). The statement that the password contains both uppercase and digits aligns with the policy, making it the true description of what’s required. Remember, the password must meet all three type requirements, not just one. Choosing a password with only uppercase or only digits would not satisfy the full rule, and “none” would contradict the requirement for these character types.