Study. uk . com
  1. Home
  2. All questions
  3. Question 334

CISSP study material · question 334 of 500

Which three properties must an AAL3 authenticator and its protocol have, according to NIST SP 800-63B? Choose three.

  1. A replay-resistant authentication protocol.
  2. Communication over one or more authenticated protected channels.
  3. A shared secret registered with the verifier at enrolment.
  4. Public-key cryptography, so compromising the verifier does not yield the authentication secret.
Show the answer

Answer: D. Public-key cryptography, so compromising the verifier does not yield the authentication secret.
B. Communication over one or more authenticated protected channels.
A. A replay-resistant authentication protocol.

AAL3 requires approved cryptography over authenticated protected channels, a replay-resistant protocol, demonstrated authentication intent, and public-key cryptography protecting secrets from verifier compromise.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 > 2.3 Authentication Assurance Level 3

Challenge yourself on this topic → Study as cards