1. Home
2. All questions
3. Question 355

CISSP study material · question 355 of 500

A resource server accepts JSON web tokens up to an hour past their expiry to accommodate clock differences between hosts. What does RFC 7519 permit?

• Access management

1. Leeway of up to one hour, provided the issuer and audience share a time source.
2. Some small leeway, usually no more than a few minutes, for clock skew.
3. Leeway equal to the token's original lifetime.
4. No leeway at all; the token must be rejected at the stated instant.

Challenge yourself on this topic → Study as cards