Study. uk . com
  1. Home
  2. All questions
  3. Question 306

CompTIA Security+ study material · question 306 of 611

Which two properties must a password reset link have? Choose two.

  1. Reusable until the password is changed
  2. Contains the user's current password hash
  3. Short lifetime
  4. Single use
Show the answer

Answer: C. Short lifetime
D. Single use

A reusable or long-lived link left in a mailbox becomes a standing account takeover route.

Source: OWASP Authentication Cheat Sheet (OWASP) — OWASP Authentication Cheat Sheet › Password Reset

Challenge yourself on this topic → Study as cards