ITPEC IP April 2026 Question 38
Which of the following is an authentication method where a user uses information that differs each time and is generated with a device called a token or other such devices?
Explanation
One-time password — a password that changes every time, generated by a token.
A token is a small device or smartphone app that generates a new password for each login, typically from the current time or a counter. The server generates the same value and compares them. A password captured by an eavesdropper is useless because it is valid only once.
Answer (d)
Why not others:
- •(a) Digital signature — proves who created electronic data and that it was not altered; it is not a login password
- •(b) Password cracking — an attack that tries to find out passwords
- •(c) Password policy — the rules for passwords, such as length, character types and expiry
Key rule: A one-time password defeats replay: even if it is stolen, it cannot be used again.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.