SY0-701 · Question #286
SY0-701 Question #286: Real Exam Question with Answer & Explanation
The correct answer is C: The SMS OTP is more likely to be intercepted and lead to unauthorized disclosure of the code. The SMS OTP (One-Time Password) method is more vulnerable to interception compared to TOTP (Time-based One-Time Password) because SMS messages can be intercepted through various attack vectors like SIM swapping or SMS phishing. TOTP, on the other hand, generates codes directly on
Question
Which of the following best describes why me SMS DIP authentication method is more risky to implement than the TOTP method?
Options
- AThe SMS OTP method requires an end user to have an active mobile telephone service and SIM
- BGenerally. SMS OTP codes are valid for up to 15 minutes while the TOTP time frame is 30 to 60
- CThe SMS OTP is more likely to be intercepted and lead to unauthorized disclosure of the code
- DThe algorithm used to generate on SMS OTP code is weaker than the one used to generate a
Explanation
The SMS OTP (One-Time Password) method is more vulnerable to interception compared to TOTP (Time-based One-Time Password) because SMS messages can be intercepted through various attack vectors like SIM swapping or SMS phishing. TOTP, on the other hand, generates codes directly on the device and does not rely on a communication channel like SMS, making it less susceptible to interception.
Community Discussion
No community discussion yet for this question.