1. Home
2. All questions
3. Question 41

CISSP study material · question 41 of 500

To cut handshake cost on a heavily loaded TLS 1.3 service, a platform team configures its servers to issue resumption tickets advertising a thirty-day lifetime. A reviewer warns that clients will ignore the advertised value long before then. Which description of ticket lifetime handling is correct?

• Network security
• Security operations

1. The advertised lifetime may not exceed one day, and a client stops reusing the ticket as soon as the connection is closed.
2. The advertised lifetime may reach thirty days, and a client stops reusing the ticket when the server's advertised value expires.
3. The advertised lifetime may not exceed seven days, and a client stops reusing the ticket seven days after issuance regardless.
4. The advertised lifetime is unbounded, and a client stops reusing the ticket only when the server refuses a resumption attempt.

Challenge yourself on this topic → Study as cards