Study. uk . com
  1. Home
  2. All questions
  3. Question 318

CISSP study material · question 318 of 500

Which three password handling behaviours does NIST SP 800-63B recommend of verifiers? Choose three.

  1. Accept all printing ASCII characters and the space character.
  2. Reject any password containing a space, to avoid parsing ambiguity.
  3. Accept Unicode characters, counting each code point as one character of length.
  4. Permit a maximum length of at least 64 characters.
Show the answer

Answer: C. Accept Unicode characters, counting each code point as one character of length.
D. Permit a maximum length of at least 64 characters.
A. Accept all printing ASCII characters and the space character.

Verifiers should permit at least 64 characters, accept all printing ASCII and the space, and accept Unicode with each code point counted as one character.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 > 3.1.1.2 Password Verifiers

Challenge yourself on this topic → Study as cards