Study. uk . com
  1. Home
  2. All questions
  3. Question 253

CompTIA Security+ study material · question 253 of 611

A service proofs users at a high level but allows single-factor login. Which NIST assurance components describe these two choices?

  1. A single level of assurance covers both
  2. AAL for proofing and FAL for authentication
  3. IAL for proofing and AAL for authentication
  4. FAL for proofing and IAL for authentication
Show the answer

Answer: C. IAL for proofing and AAL for authentication

NIST separates identity, authenticator and federation assurance so an organisation can choose each independently.

Source: NIST SP 800-63 Rev. 4 (NIST) — SP 800-63-4 › Digital Identity Model

Challenge yourself on this topic → Study as cards