Study. uk . com
  1. Home
  2. All questions
  3. Question 313

CompTIA Security+ study material · question 313 of 611

Which reauthentication limits does NIST associate with AAL3?

  1. 1 hour overall, 5 minutes inactivity
  2. 30 days overall, no inactivity limit
  3. 24 hours overall, 1 hour inactivity
  4. 12 hours overall, 15 minutes inactivity
Show the answer

Answer: D. 12 hours overall, 15 minutes inactivity

Limits tighten with assurance: roughly 30 days at AAL1, 24 hours at AAL2, and 12 hours at AAL3.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 §§ 2.1.3, 2.2.3, 2.3.3

Challenge yourself on this topic → Study as cards