Question from the Java test

Which types should be avoided for storing/passing passwords?