Which process involves reviewing the password policy to ensure proper settings?

• A. Auditing
• B. In-Band Authentication
• C. Out-of-Band Authentication
• D. RADIUS

Answer: (A)

Auditing focuses on inspecting security controls to verify that policy settings are correct and being enforced. When you audit a password policy, you review its parameters—such as minimum length, complexity requirements, password history, account lockout rules, and expiration settings—and check logs or records to confirm those rules are actually applied in practice. This helps ensure that the policy is configured properly and remains compliant over time, catching any misconfigurations or deviations early.

In-band and out-of-band authentication describe how credentials are presented and verified, not the activity of reviewing or validating policy configurations. RADIUS is a protocol used to centralize authentication, authorization, and accounting, which can enforce policies but doesn’t by itself involve reviewing the policy settings.