Study. uk . com
  1. Home
  2. All questions
  3. Question 315

CompTIA Security+ study material · question 315 of 611

At every assurance level, what does NIST require of the channel between the claimant and the verifier?

  1. It must be an authenticated protected channel
  2. It must terminate at a hardware security module
  3. It must be re-established for every request
  4. It must be a dedicated private circuit
Show the answer

Answer: A. It must be an authenticated protected channel

Without an authenticated protected channel, credentials could be observed or altered in transit regardless of the AAL.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 §§ 2.1.2, 2.2.2, 2.3.2

Challenge yourself on this topic → Study as cards