Study. uk . com
  1. Home
  2. All questions
  3. Question 268

CompTIA Security+ study material · question 268 of 611

Before sending an authentication code over the telephone network, which two risk indicators should a verifier consider? Choose two.

  1. A recent SIM change
  2. A recent number port
  3. The user's password age
  4. The number of previous successful logins
Show the answer

Answer: A. A recent SIM change
B. A recent number port

Both signal that control of the phone number may have moved to someone else, which is how SMS codes are hijacked.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 § 3.1.3.3

Challenge yourself on this topic → Study as cards