Study. uk . com
  1. Home
  2. All questions
  3. Question 245

CompTIA Security+ study material · question 245 of 611

A relying party needs to know only whether a user is over eighteen. Which approach best satisfies privacy expectations?

  1. Receive the full date of birth and compute the answer
  2. Receive the full identity profile and cache it
  3. Receive a claim confirming the age threshold is met
  4. Receive a hashed date of birth
Show the answer

Answer: C. Receive a claim confirming the age threshold is met

Narrow queries answer the decision without transferring the underlying attribute the relying party would then have to protect.

Source: NIST SP 800-63 Rev. 4 (NIST) — SP 800-63-4 › Executive Summary

Challenge yourself on this topic → Study as cards