A company notices that employees are still choosing weak passwords such as 'Company2024!' and other predictable variations that pass complexity rules. The security team wants to prevent users from setting passwords that contain company-specific terms and known weak words, both in the cloud and on their on-premises Active Directory. Which Microsoft Entra capability should they configure?