Study. uk . com
  1. Home
  2. All questions
  3. Question 316

CompTIA Security+ study material · question 316 of 611

What are the minimum requirements for an out-of-band authentication secret?

  1. At least eight alphanumeric characters chosen by the user
  2. A value derived from the user's password
  3. At least six decimal digits from an approved random bit generator
  4. Four decimal digits from any random source
Show the answer

Answer: C. At least six decimal digits from an approved random bit generator

Length and randomness together are what make guessing impractical within the rate limit.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 § 3.1.3.2

Challenge yourself on this topic → Study as cards