- Home
- All questions
- Question 210
CISSP study material · question 210 of 500
A team must decide when an established session should be re-evaluated. Which triggers does SP 800-207 name? Choose three.
Show the answer
Answer: C. Anomalous subject activity has been detected.
D. A period of time has elapsed since the last evaluation.
A. The subject requests a new resource, or an existing resource changes.
Reauthentication and reauthorisation are driven by policy, with triggers such as elapsed time, a new resource requested, a resource modified, or anomalous subject activity.
Source: NIST SP 800-207 (NIST) — SP 800-207 > 2.1 Tenets of Zero Trust, tenet 6