Users keep choosing passwords containing 'Contoso' and 'HQ2026'. Complexity is on, but terms are guessable. What blocks org-specific terms?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Complexity doesn't know your company name is a terrible password root. Entra Password Protection custom banned list does.
Full explanation below image
Full Explanation
Correct Answer — B
Password Protection combines global + custom banned lists including fuzzy variants. SharePoint DLP, meeting policies, and Copilot web search don't evaluate password sets.
Exam tip: Company-name passwords → custom banned list.