Study. uk . com
  1. Home
  2. All questions
  3. Question 273

CompTIA Security+ study material · question 273 of 611

How does an inactivity timeout differ from an overall session timeout?

  1. The inactivity timeout caps total session length from login
  2. The inactivity timeout ends a session that has gone quiet, regardless of total length
  3. They are the same control under different names
  4. The overall timeout applies only to administrative sessions
Show the answer

Answer: B. The inactivity timeout ends a session that has gone quiet, regardless of total length

One bounds idle time, the other bounds total time since authentication; both are required at AAL2 and above.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 § 2.1.3

Challenge yourself on this topic → Study as cards