Study. uk . com
  1. Home
  2. All questions
  3. Question 293

CompTIA Security+ study material · question 293 of 611

An attacker captures a valid assertion from one relying party and presents it to a second. Which assertion property prevents this from working?

  1. Transport over TLS
  2. Binding to a specific audience
  3. A short validity window
  4. A unique assertion identifier
Show the answer

Answer: B. Binding to a specific audience

Audience binding means the second relying party rejects an assertion issued for someone else.

Source: NIST SP 800-63C Rev. 4 (NIST) — SP 800-63C-4 › Assertion Requirements

Challenge yourself on this topic → Study as cards