Users tend to choose passwords that are easy to remember. Passwords can often be broken by repeated trials. Users tend to write their passwords down. They tend to choose passwords that can be deduced by someone who knows the user (telephone numbers, name of a close friend, something about the user such as a hobby, and the like). Also, users tend to use the same password for many different systems.

What will be an ideal response?

This scheme would probably deter novice users.