Study. uk . com
  1. Home
  2. All questions
  3. Question 254

CompTIA Security+ study material · question 254 of 611

Which authenticator arrangement satisfies AAL3?

  1. A password of at least fifteen characters
  2. A password plus a one-time password from an authenticator app
  3. A password plus an SMS code
  4. A hardware cryptographic authenticator whose private key cannot be exported
Show the answer

Answer: D. A hardware cryptographic authenticator whose private key cannot be exported

AAL3 requires a phishing-resistant cryptographic authenticator with a non-exportable key. The others meet AAL1 or AAL2.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 › Authentication Assurance Levels

Challenge yourself on this topic → Study as cards