Which action would constitute a security violation?

• A. Placing an NSS token in a NIPR system and entering the PIN
• B. Sharing your PIN with a trusted person
• C. Issuing a token
• D. Sending 2842 to LRA after issuance

Answer: (A)

Protecting authentication credentials and keeping tokens bound to trusted systems is essential. An NSS token is meant to be used with secure, authorized equipment, and the PIN that unlocks it should never be entered on systems that aren’t trusted. Placing the token in a NIPR system, which is an unclassified network, and entering the PIN there creates a vulnerability: the PIN and token could be exposed to an insecure host or network, increasing the chance of compromise. This direct exposure of a sensitive credential in an untrusted environment is why this action constitutes a security violation. The other options don’t describe using the credential in an insecure context, such as legitimate provisioning or procedural steps.