nerdexam
(ISC)2

CISSP · Question #1289

After the INITIAL input o f a user identification (ID) and password, what is an authentication system that prompts the user for a different response each time the user logs on?

The correct answer is C. Challenge response. A challenge response is an authentication system that prompts the user for a different response each time the user logs on, based on a challenge that is generated by the system or the user. The challenge can be a random number, a question, a passphrase, or a biometric feature…

Submitted by jakub_pl· Mar 5, 2026Identity and Access Management

Question

After the INITIAL input o f a user identification (ID) and password, what is an authentication system that prompts the user for a different response each time the user logs on?

Options

  • APersons Identification Number (PIN)
  • BSecondary password
  • CChallenge response
  • DVoice authentication

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    8% (2)
  • C
    88% (22)

Explanation

A challenge response is an authentication system that prompts the user for a different response each time the user logs on, based on a challenge that is generated by the system or the user. The challenge can be a random number, a question, a passphrase, or a biometric feature. The response can be a one-time password, a secret answer, a hash value, or a biometric verification. A challenge response system provides a higher level of security than a static password, as it prevents replay attacks and password guessing. A personal identification number (PIN) is a type of password that consists of a numeric code. A secondary password is another type of password that is used in addition to the primary password. A voice authentication is a type of biometric authentication that uses the voice characteristics of a user.

Topics

#Authentication methods#Challenge-response authentication#Dynamic authentication

Community Discussion

No community discussion yet for this question.

Full CISSP Practice