What statement is accurate regarding the portal's default password management for a division?

The statement that the default password should be managed via Password Preferences is accurate because Cornerstone OnDemand provides an administrative setting where organizations can define how default passwords are generated and managed for users within a division. Password Preferences allow administrators not only to set guidelines for a default password but also to enforce security policies related to password complexity, expiration, and rotation.

Managing default passwords through Password Preferences ensures a standardized approach within the organization, maintaining security and compliance while allowing for necessary adjustments. This effectively streamlines the user onboarding process, ensuring that all new users have an initial password that adheres to the organization’s security protocols, which can subsequently be changed upon the user’s first login.

The other options do not fully represent the management capabilities provided by the platform's settings. For example, while users might receive default passwords, these are not created manually by the users themselves or entirely locked in place without the ability to modify them based on organizational preferences or security standards.