Study. uk . com
  1. Home
  2. All questions
  3. Question 294

CompTIA Security+ study material · question 294 of 611

Which two assertion properties let a relying party reject a stale or already-used assertion? Choose two.

  1. An audience restriction
  2. An encrypted attribute payload
  3. A short validity window
  4. A unique assertion identifier
Show the answer

Answer: C. A short validity window
D. A unique assertion identifier

The window bounds staleness and the identifier lets the relying party detect one it has already accepted.

Source: NIST SP 800-63C Rev. 4 (NIST) — SP 800-63C-4 › Assertion Requirements

Challenge yourself on this topic → Study as cards