Study. uk . com
  1. Home
  2. All questions
  3. Question 360

CompTIA Security+ study material · question 360 of 611

An ABAC deployment produces wrong decisions even though its rules are correct. What should be examined first?

  1. The session timeout configuration
  2. The number of roles defined
  3. The policy enforcement point's placement
  4. The quality and freshness of the attributes feeding the rules
Show the answer

Answer: D. The quality and freshness of the attributes feeding the rules

Stale or unverified attributes make correct rules produce wrong answers, so attribute management is part of the control.

Source: NIST SP 800-162 (NIST) — SP 800-162 § 3 Attribute Management

Challenge yourself on this topic → Study as cards