Check if the password has a "%" sign, then check for "&", and finally return True if percent or and_sign are True.

Make sure to pick password.count("%") > 0, followed by password.count("&") > 0, and finally percent or and_sign.