Which AAA method is commonly used for providing strong authentication by using one-time passwords (OTPs) or hardware tokens?

Question

Options

• ALDAP
• BRADIUS
• CRSA SecurID
• DTACACS

• A
  5% (1)
• C
  95% (20)

Explanation

RSA SecurID is the correct choice because it is specifically designed to provide strong authentication through one-time passwords (OTPs) and hardware tokens - the token generates a new code every 60 seconds, making replay attacks essentially impossible.

LDAP (A) is a directory protocol used to look up and authenticate users against a directory service like Active Directory, but it does not natively generate OTPs or use hardware tokens. RADIUS (B) is an AAA protocol that can carry authentication data (including OTP responses) across a network, but RADIUS itself is the transport mechanism - not the OTP generation system. TACACS (D) is also an AAA protocol (primarily used for network device administration) that handles the communication of credentials, but again does not generate OTPs or tokens.

Memory tip: Think "RSA = Real Strong Authentication" - RSA is a security company synonymous with token-based MFA. When you see OTP or hardware token in an AAA question, RSA SecurID is the answer; RADIUS and TACACS are protocols that move AAA data around, not authentication mechanisms that generate it.

No community discussion yet for this question.