MENU
Which of the following choices describe a Challenge-response tokens generation?
Suggested Answer: A
Get Premium SSCP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Challenge-response tokens are:
- A workstation or system generates a random challenge string and the owner enters the string into the token along with the proper PIN.
- The token generates a response that is then entered into the workstation or system.
- The authentication mechanism in the workstation or system then determines if the owner should be authenticated.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 37.
Also: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, chapter 4: Access Control (pages 136-137).
22 comments · newest first
RE
Ressie
9 months ago
Totally agree with A, it's the standard method!
TE
Tegan
9 months ago
Wait, D doesn't even make sense, right?
KI
Kimbery
9 months ago
C sounds interesting, but not really what challenge-response is.
LA
Laurel
9 months ago
I think B is misleading, it's not about login IDs.
JO
Josefa
10 months ago
Definitely A, that's how challenge-response works!
YE
Yen
11 months ago
Option B seems off because generating a random login ID doesn't really fit the challenge-response concept, right?
ET
Ettie
11 months ago
I remember practicing a question similar to this, and I think the challenge-response involves entering something unique like a challenge string, so A seems right to me.
LO
Lourdes
11 months ago
I'm not entirely sure, but I feel like option C might be related to cryptographic tokens, though it doesn't specifically mention challenge-response.
JO
Josphine
11 months ago
I think option A sounds familiar because it mentions a random challenge string, which is what we discussed in class about challenge-response systems.
CA
Carmela
12 months ago
This is a good test of our understanding of challenge-response authentication. I'm going to carefully consider each option and try to eliminate the ones that don't fit the description.
LE
Lennie
12 months ago
I'm a little confused by the wording of some of these options. I'll need to re-read them a few times to make sure I'm understanding them correctly before answering.
TE
Terina
12 months ago
Okay, let's see. I think option A is the right choice here - it describes a challenge-response token generation process where the user enters a random challenge string along with their PIN.
MA
Madelyn
1 year ago
Hmm, I'm a bit unsure about this one. I'll need to think it through carefully to make sure I understand the differences between the options.
BR
Brock
1 year ago
This one seems pretty straightforward. I'm pretty confident that option A is the correct answer.
CL
Clarinda
1 year ago
I agree with Teddy, A seems like the most logical choice for Challenge-response tokens generation.
SA
Sabrina
1 year ago
A is the correct answer. The token generates a random challenge string that the user enters along with their PIN to authenticate.
TE
Teddy
10 months ago
A is spot on for authentication methods!
AN
Angella
10 months ago
Right! The PIN alone isn’t enough.
SY
Sylvie
10 months ago
Definitely! It’s all about that challenge string.
JU
Julio
10 months ago
I agree, A makes the most sense.
EL
Elinore
1 year ago
I disagree, I believe the answer is C, as it mentions a special hardware device.
TE
Teddy
1 year ago
I think the answer is A, because it mentions a random challenge string.