Which of the following authentication methods provides credentials that are only valid during a single session?

Question

Options

• AKerberos v5
• BSmart card
• CCertificate
• DToken

• A
  3% (1)
• B
  5% (2)
• C
  3% (1)
• D
  90% (35)

Explanation

Tokens generate time-based or event-based one-time passwords (OTPs) that are valid for a single authentication attempt - once used or once the session ends, the credential is invalidated and a new one must be generated. This single-use nature is their defining security characteristic.

Why the distractors are wrong:

• Kerberos v5 (A): Issues tickets that are reusable across multiple sessions within a configurable validity window (typically hours), not single-session only.
• Smart card (B): Stores persistent cryptographic keys on the card itself; those credentials remain valid across many sessions until the certificate expires or is revoked.
• Certificate (C): Has a multi-month or multi-year validity period and can authenticate across countless sessions during that window.

Memory tip: Think "Token = Temporary ticket" - just like a single-use concert stub, a token's credential gets "torn" after one entry and can never be reused.

No community discussion yet for this question.