You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named Ben Smith. You configure a Password protection for contoso.com that includes the following Custom banned passwords

Question

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named Ben Smith.

You configure a Password protection for contoso.com that includes the following Custom banned passwords settings:

Enforce custom list: Yes
Custom banned password list: Contoso
Which password can be used by Ben Smith?

Select only one answer.

FgRs01

C0nt0s0123

CONTOSO123

Conto123so

Answer 1

Add strings to the Custom banned password list, one string per line. The following considerations and limitations apply to the custom banned password list:

The custom banned password list can contain up to 1000 terms.
The custom banned password list is case-insensitive.
The custom banned password list considers common character substitution, such as "o" and "0", or "a" and "@".
The minimum string length is four characters, and the maximum is 16 characters.

https://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-configure-custom-password-protection#:~:text=Add%20strings%20to,is%2016%20characters.

So you need to choice the "Conto123so" password.

Kind Rgards,

José Araujo Neto

Answer 2

why not FgRs01

Answer 3

The answer is either FgRs01 or Conto123so, as C0nt0s0123 & CONTOSO123 contain the word Contoso (with number substitutions) which is what the password list is there to prevent (variations of the word). Also FgRs01 is six characters, this satisfies the minimum length which is four, also this uses upper and lowercase with numeric characters, and is not linked to Contoso, so is harder to guess by brute force attacks.

Answer 4

Try with Conto123so :)

Answer 5

Conto123so