Which of the following controls would BEST decrease the exposure if a password is compromised?

A. Passwords are masked.
B. Passwords are encrypted.
C. Passwords have format restrictions.
D. Password changes are forced periodically.