ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 155 - SY0-601 discussion

Report
Export

Which of the following authentication methods is considered to be the LEAST secure?

A.
TOTP
Answers
A.
TOTP
B.
SMS
Answers
B.
SMS
C.
HOTP
Answers
C.
HOTP
D.
Token key
Answers
D.
Token key
Suggested answer: B

Explanation:

SMS-based authentication is considered to be the least secure among the given options. This is because SMS messages can be intercepted or redirected by attackers through techniques such as SIM swapping, man-in-the-middle attacks, or exploiting weaknesses in the SS7 protocol used by mobile networks. Additionally, SMS messages can be compromised if a user's phone is lost, stolen, or infected with malware. In contrast, TOTP (Time-based One-Time Password), HOTP (HMAC-based One-Time Password), and token keys are more secure as they rely on cryptographic algorithms or physical devices to generate one-time use codes, which are less susceptible to interception or unauthorized access. Reference: 1. National Institute of Standards and Technology (NIST). (2017). Digital Identity Guidelines: Authentication and Lifecycle Management (NIST SP 800-63B). https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63b.pdf

asked 02/10/2024
Joseph Bauer
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first