Tara Has Just Discovered the John the Ripper Tool on a Workstation

Multiple Choice

Tara has just discovered the John the Ripper tool on a workstation on her company's network, which is a direct violation of an existing policy that defines what users are allowed and not allowed to do on the network. She believes that if other instances of this tool are installed, the current policy protecting against attacks from such tools needs to be strengthened properly. Which of the following policies might she choose to update as a result?

A) AUP
B) Password policy
C) Account management policy
D) Data retention policy