Study. uk . com
  1. Home
  2. All questions
  3. Question 198

CISSP study material · question 198 of 500

A session is approved. Which two things does the policy administrator do next, in the SP 800-207 model? Choose two.

  1. Instruct the enforcement point to allow the communication path to open.
  2. Record the decision in the diagnostics system for later audit.
  3. Generate the session-specific credential or token the client will use.
  4. Recompute the trust algorithm to confirm the engine's decision.
Show the answer

Answer: A. Instruct the enforcement point to allow the communication path to open.
C. Generate the session-specific credential or token the client will use.

The policy administrator establishes or tears down the path by commanding enforcement points, and generates any session-specific authentication token or credential the client needs.

Source: NIST SP 800-207 (NIST) — SP 800-207 > 3 Logical Components, Policy administrator

Challenge yourself on this topic → Study as cards