Study. uk . com
  1. Home
  2. All questions
  3. Question 261

CompTIA Security+ study material · question 261 of 611

When checking a new password against a blocklist, what must be compared?

  1. Each word inside the password
  2. The entire password string
  3. The password after composition rules are applied
  4. The password's hash prefix only
Show the answer

Answer: B. The entire password string

The whole password is compared, not substrings, so a long passphrase containing a common word is not rejected outright.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 § 3.1.1.2

Challenge yourself on this topic → Study as cards