Study. uk . com
  1. Home
  2. All questions
  3. Question 329

CISSP study material · question 329 of 500

Which two requirements does NIST SP 800-63B place on the generation and form of look-up secrets? Choose two.

  1. They must be generated using an approved random bit generator.
  2. They must be at least six decimal digits or the equivalent in length.
  3. They must be delivered only in an in-person session.
  4. They must expire within 24 hours of issue.
Show the answer

Answer: A. They must be generated using an approved random bit generator.
B. They must be at least six decimal digits or the equivalent in length.

An approved random bit generator must create the list, and each secret must be at least six decimal digits or the equivalent in length.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 > 3.1.2.1 Look-Up Secret Authenticators

Challenge yourself on this topic → Study as cards