Study. uk . com
  1. Home
  2. All questions
  3. Question 210

CISSP study material · question 210 of 500

A team must decide when an established session should be re-evaluated. Which triggers does SP 800-207 name? Choose three.

  1. The subject requests a new resource, or an existing resource changes.
  2. The subject's password has reached its scheduled expiry.
  3. Anomalous subject activity has been detected.
  4. A period of time has elapsed since the last evaluation.
Show the answer

Answer: C. Anomalous subject activity has been detected.
D. A period of time has elapsed since the last evaluation.
A. The subject requests a new resource, or an existing resource changes.

Reauthentication and reauthorisation are driven by policy, with triggers such as elapsed time, a new resource requested, a resource modified, or anomalous subject activity.

Source: NIST SP 800-207 (NIST) — SP 800-207 > 2.1 Tenets of Zero Trust, tenet 6

Challenge yourself on this topic → Study as cards