Study. uk . com
  1. Home
  2. All questions
  3. Question 271

CompTIA Security+ study material · question 271 of 611

What does the AAL3 requirement to demonstrate authentication intent mean in practice?

  1. The session must be re-established for each resource
  2. The verifier must log the intent to authenticate
  3. A deliberate user action such as touching the security key is required
  4. The user must enter a password before the token is used
Show the answer

Answer: C. A deliberate user action such as touching the security key is required

Requiring a physical action stops malware on the host from silently exercising a connected authenticator.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 § 2.3.2

Challenge yourself on this topic → Study as cards