- Home
- All questions
- Question 587
CompTIA Security+ study material · question 587 of 611
Which two are identification and authentication failures? Choose two.
Show the answer
Answer: A. Session identifiers that are never rotated
D. Permitting unlimited brute-force attempts
The other two are cross-site scripting and security misconfiguration respectively.
Source: OWASP Top 10 (OWASP) — OWASP Top Ten › Identification and Authentication Failures