New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 SSCP Exam - Topic 2 Question 94 Discussion

Actual exam question for ISC2's SSCP exam
Question #: 94
Topic #: 2
[All SSCP Questions]

Which type of password token involves time synchronization?

Show Suggested Answer Hide Answer
Suggested Answer: A

The Domain Name System (DNS) is a hierarchical distributed naming system for computers, services, or any resource connected to the Internet or a private network. It associates information from domain names with each of the assigned entities. Most prominently, it translates easily memorized domain names to the numerical IP addresses needed for locating computer services and devices worldwide. The Domain Name System is an essential component of the functionality of the Internet. This article presents a functional description of the Domain Name System.

For your exam you should know below information general Internet terminology:

Network access point - Internet service providers access internet using net access point.A Network Access Point (NAP) was a public network exchange facility where Internet service providers (ISPs) connected with one another in peering arrangements. The NAPs were a key component in the transition from the 1990s NSFNET era (when many networks were government sponsored and commercial traffic was prohibited) to the commercial Internet providers of today. They were often points of considerable Internet congestion.

Internet Service Provider (ISP) - An Internet service provider (ISP) is an organization that provides services for accessing, using, or participating in the Internet. Internet service providers may be organized in various forms, such as commercial, community-owned, non-profit, or otherwise privately owned. Internet services typically provided by ISPs include Internet access, Internet transit, domain name registration, web hosting, co-location.

Telnet or Remote Terminal Control Protocol -A terminal emulation program for TCP/IP networks such as the Internet. The Telnet program runs on your computer and connects your PC to a server on the network. You can then enter commands through the Telnet program and they will be executed as if you were entering them directly on the server console. This enables you to control the server and communicate with other servers on the network. To start a Telnet session, you must log in to a server by entering a valid username and password. Telnet is a common way to remotely control Web servers.

Internet Link- Internet link is a connection between Internet users and the Internet service provider.

Secure Shell or Secure Socket Shell (SSH) - Secure Shell (SSH), sometimes known as Secure Socket Shell, is a UNIX-based command interface and protocol for securely getting access to a remote computer. It is widely used by network administrators to control Web and other kinds of servers remotely. SSH is actually a suite of three utilities - slogin, ssh, and scp - that are secure versions of the earlier UNIX utilities, rlogin, rsh, and rcp. SSH commands are encrypted and secure in several ways. Both ends of the client/server connection are authenticated using a digital certificate, and passwords are protected by being encrypted.

Domain Name System (DNS) - The Domain Name System (DNS) is a hierarchical distributed naming system for computers, services, or any resource connected to the Internet or a private network. It associates information from domain names with each of the assigned entities. Most prominently, it translates easily memorized domain names to the numerical IP addresses needed for locating computer services and devices worldwide. The Domain Name System is an essential component of the functionality of the Internet. This article presents a functional description of the Domain Name System.

File Transfer Protocol (FTP) - The File Transfer Protocol or FTP is a client/server application that is used to move files from one system to another. The client connects to the FTP server, authenticates and is given access that the server is configured to permit. FTP servers can also be configured to allow anonymous access by logging in with an email address but no password. Once connected, the client may move around between directories with commands available

Simple Mail Transport Protocol (SMTP) - SMTP (Simple Mail Transfer Protocol) is a TCP/IP protocol used in sending and receiving e-mail. However, since it is limited in its ability to queue messages at the receiving end, it is usually used with one of two other protocols, POP3 or IMAP, that let the user save messages in a server mailbox and download them periodically from the server. In other words, users typically use a program that uses SMTP for sending e-mail and either POP3 or IMAP for receiving e-mail. On Unix-based systems, send mail is the most widely-used SMTP server for e-mail. A commercial package, Send mail, includes a POP3 server. Microsoft Exchange includes an SMTP server and can also be set up to include POP3 support.

The following answers are incorrect:

SMTP - Simple Mail Transport Protocol (SMTP) - SMTP (Simple Mail Transfer Protocol) is a TCP/IP protocol used in sending and receiving e-mail. However, since it is limited in its ability to queue messages at the receiving end, it is usually used with one of two other protocols, POP3 or IMAP, that let the user save messages in a server mailbox and download them periodically from the server. In other words, users typically use a program that uses SMTP for sending e-mail and either POP3 or IMAP for receiving e-mail. On Unix-based systems, send mail is the most widely-used SMTP server for e-mail. A commercial package, Send mail, includes a POP3 server. Microsoft Exchange includes an SMTP server and can also be set up to include POP3 support.

FTP - The File Transfer Protocol or FTP is a client/server application that is used to move files from one system to another. The client connects to the FTP server, authenticates and is given access that the server is configured to permit. FTP servers can also be configured to allow anonymous access by logging in with an email address but no password. Once connected, the client may move around between directories with commands available

SSH - Secure Shell (SSH), sometimes known as Secure Socket Shell, is a UNIX-based command interface and protocol for securely getting access to a remote computer. It is widely used by network administrators to control Web and other kinds of servers remotely. SSH is actually a suite of three utilities - slogin, ssh, and scp - that are secure versions of the earlier UNIX utilities, rlogin, rsh, and rcp. SSH commands are encrypted and secure in several ways. Both ends of the client/server connection are authenticated using a digital certificate, and passwords are protected by being encrypted.

The following reference(s) were/was used to create this question:

CISA review

manual 2014 page number 273 and 274


Contribute your Thoughts:

0/2000 characters
Adelina
3 months ago
That's interesting, I didn't know time sync was involved!
upvoted 0 times
...
Devora
3 months ago
Yup, B is the right answer!
upvoted 0 times
...
Ashanti
3 months ago
Wait, are you sure? I thought it was A or C.
upvoted 0 times
...
Gilma
4 months ago
Agreed, they rely on time sync for generating codes.
upvoted 0 times
...
Major
4 months ago
It's definitely B, synchronous dynamic tokens!
upvoted 0 times
...
Trina
4 months ago
I keep mixing up synchronous and asynchronous tokens. I hope I remember that synchronous ones are the ones that sync with time!
upvoted 0 times
...
Rory
4 months ago
I practiced a similar question last week, and I think it was about dynamic tokens. I feel like B is definitely the right choice here.
upvoted 0 times
...
Elina
4 months ago
I'm not entirely sure, but I remember something about challenge-response tokens being different. They don't use time, right?
upvoted 0 times
...
Emilio
5 months ago
I think the answer might be B, synchronous dynamic password tokens, because they rely on time synchronization to generate codes.
upvoted 0 times
...
Tamar
5 months ago
Time synchronization... that makes me think of synchronous dynamic password tokens. I'll go with B for this one.
upvoted 0 times
...
Justa
5 months ago
I've got a good handle on password tokens, so I'm confident the answer is B. Synchronous dynamic password tokens use time synchronization.
upvoted 0 times
...
Hannah
5 months ago
I'm a bit confused on the differences between the token types. I'll need to review my notes to make sure I understand this properly.
upvoted 0 times
...
Teri
5 months ago
Okay, I know synchronous dynamic password tokens involve time synchronization, so I'm pretty sure that's the right answer here.
upvoted 0 times
...
Vallie
5 months ago
Hmm, this looks like a tricky one. I'll need to think carefully about the differences between the password token types.
upvoted 0 times
...
Joye
5 months ago
I'm pretty sure this is asking about qualitative risk analysis, where we assess the likelihood and impact of risks to prioritize them.
upvoted 0 times
...
Vince
5 months ago
I remember practicing a similar question last week. I feel like option C about clients and network access might be crucial too.
upvoted 0 times
...
Alica
5 months ago
Hmm, this one seems a bit tricky. I'll need to think through the RADIUS configuration and why the source interface is important.
upvoted 0 times
...
Anglea
10 months ago
I've used static password tokens before, but they're not dynamic. Gotta go with B to keep up with the times.
upvoted 0 times
Asuncion
10 months ago
Yeah, synchronous dynamic password tokens are definitely more secure.
upvoted 0 times
...
Annabelle
10 months ago
I agree, B is the way to go for time synchronization.
upvoted 0 times
...
...
Cecily
10 months ago
Challenge-response tokens are pretty cool, but they don't involve time sync. I'm leaning towards B for this one.
upvoted 0 times
...
Barrett
10 months ago
Time synchronization, huh? Sounds like a real race against the clock! I'm going with B, just to keep things synchronized.
upvoted 0 times
...
Fatima
11 months ago
Hmm, I think option B is the correct answer. Synchronous dynamic password tokens rely on time synchronization between the token and the authentication server.
upvoted 0 times
Carlota
10 months ago
It's an effective way to prevent replay attacks.
upvoted 0 times
...
Carey
10 months ago
That's true, it helps ensure the security of the authentication process.
upvoted 0 times
...
Blair
10 months ago
Synchronous dynamic password tokens do rely on time synchronization.
upvoted 0 times
...
Rikki
10 months ago
I agree, option B is the correct answer.
upvoted 0 times
...
...
Azzie
11 months ago
I'm not sure about this one. Can someone explain why B) is the correct answer?
upvoted 0 times
...
Stevie
11 months ago
I agree with Margarita. Synchronous dynamic password tokens involve time synchronization.
upvoted 0 times
...
Margarita
11 months ago
I think the answer is B) Synchronous dynamic password tokens.
upvoted 0 times
...

Save Cancel