Passwords can be required to change monthly, quarterly, or at other intervals: 

Answer options:

A. depending on the criticality of the information needing protection
B. depending on the criticality of the information needing protection and the password`s frequency of use
C. depending on the password`s frequency of use
D. not depending on the criticality of the information needing protection but depending on the password`s frequency of use

B

Passwords can be compromised and must be protected. In the ideal case, a password should only be used once. The changing of passwords can also fall between these two extremes. Passwords can be required to change monthly, quarterly, or at other intervals, depending on the criticality of the information needing protection and the password`s frequency of use. Obviously, the more times a password is used, the more chance there is of it being compromised. Source: KRUTZ, Ronald L. & VINES, Russel
D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 36 & 37.