OCP CBT Question 600

Please solve the following question.

You need to enforce a password policy that requires passwords to be complex and users to change their password every 90 days. Users should be locked out for 1 day after 3 failed login attempts. Which profile settings must be configured?