An Activesync IT administrator has the ability to choose if the phone should require a password, and also how complex it should be.
Since the fingerprint scanner appears to replace the traditional password screen, how does that affect an Exchange-connected phone with traditional password policies?