nerdexam
(ISC)2

SSCP · Question #1290

As telnet is widely know to be insecure, one time passwords (OPIE) offer a great alternative. After a user logs on remotely, OPIE will issue a challenge. What two elements will thi challenge contain?(

The correct answer is D. A seed number E. A sequence number. OPIE (One-Time Passwords in Everything) challenges consist of a seed number and a sequence number, which the user combines with their passphrase to generate the correct one-time password.

Submitted by yousef_jo· Apr 18, 2026Access Controls

Question

As telnet is widely know to be insecure, one time passwords (OPIE) offer a great alternative. After a user logs on remotely, OPIE will issue a challenge. What two elements will thi challenge contain?( Choose two)

Options

  • ACHAP
  • BA hashed value
  • CA random value
  • DA seed number
  • EA sequence number

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    10% (2)
  • D
    86% (18)

Why each option

OPIE (One-Time Passwords in Everything) challenges consist of a seed number and a sequence number, which the user combines with their passphrase to generate the correct one-time password.

ACHAP

CHAP (Challenge-Handshake Authentication Protocol) is a different authentication protocol and is not an element contained within an OPIE challenge.

BA hashed value

A hashed value is the result of the user's calculation, not an element contained in the OPIE challenge issued by the server.

CA random value

A random value might be used to generate the seed, but the seed itself is the element provided in the challenge, not a generic 'random value.'

DA seed numberCorrect

A seed number is a unique, randomly generated value provided by the server that, when combined with the user's secret key, forms part of the one-time password generation.

EA sequence numberCorrect

A sequence number (or iteration count) is issued with the seed, indicating how many times the hashing function should be applied to the secret key and seed to generate the expected one-time password.

Concept tested: OPIE (One-Time Passwords) challenge components

Topics

#OPIE#One-Time Passwords#Authentication Protocols#Access Control

Community Discussion

No community discussion yet for this question.

Full SSCP Practice