Study. uk . com
  1. Home
  2. All questions
  3. Question 323

CISSP study material · question 323 of 500

A verifier trims leading and trailing whitespace from submitted passwords before checking them. Under what condition does NIST SP 800-63B permit such allowances?

  1. Only where the password was assigned by the provider rather than chosen.
  2. Provided the subscriber has consented to the transformation at enrolment.
  3. Provided the password is used only within a multi-factor process.
  4. Provided the password still meets the minimum length afterwards and its complexity is not significantly reduced.
Show the answer

Answer: D. Provided the password still meets the minimum length afterwards and its complexity is not significantly reduced.

Such trimming is allowed only where the result still meets the length floor and the change does not meaningfully weaken what was submitted.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 > 3.1.1.2 Password Verifiers

Challenge yourself on this topic → Study as cards