Study. uk . com
  1. Home
  2. All questions
  3. Question 314

CISSP study material · question 314 of 500

A verifier rejects any password containing a substring found on its blocklist, so that a passphrase containing a common word is refused. What does NIST SP 800-63B actually require?

  1. The entire prospective password is compared against the blocklist, not substrings or contained words.
  2. Only the first and last eight characters need be compared.
  3. Comparison is required only for passwords used as a single factor.
  4. Every substring of four characters or more must be compared.
Show the answer

Answer: A. The entire prospective password is compared against the blocklist, not substrings or contained words.

SP 800-63B requires the whole password to be compared against the blocklist, and states substrings or words that might be contained within it are not what is compared.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 > 3.1.1.2 Password Verifiers

Challenge yourself on this topic → Study as cards