Quiz: understanding security policies in SAP (SECPOL)

Scenario:

Imagine your SAP system (1 application server) is running with the following system profile parameter settings (RZ10):

Kernel default values:

login/min_password_digits = 0

login/min_password_lng = 6

login/min_password_lowercase = 0

login/min_password_specials = 0

Default profile values:

login/min_password_lng = 8

login/min_password_lowercase = 1

Instance profile values:

login/min_password_digits = 1

login/min_password_lowercase = 2

login/min_password_specials = 1

Due to strict security requirements for employees in the IT department of your company, you now want to ensure that all of them use at least 4 digits in their password. You have heard about security policies in the SAP system and therefore you created the following new security policy using transaction SECPOL and assigned it to all IT employees.

Security policy values:

MIN_PASSWORD_DIGITS = 4

Question:

Which of the following password options can be used by IT employees after the new security policy has been assigned to their user master record?

Possible options to choose:

1. ab-1234
2. abcd-123
3. 123456
4. abc-1234
5. abcd1234

Choose wisely and please explain your choice.

Hint: SAP Security policies / Group policies