Which type of password provides maximum security because a new password is required for each new log-on?
Click on the arrows to vote for the correct answer
A. B. C. D.A.
"one-time password" provides maximum security because a new password is required for each new log-on.
Source: KRUTZ, Ronald L.
& VINES, Russel.
D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 36.
The type of password that provides maximum security because a new password is required for each new log-on is A) One-time or dynamic password.
A one-time or dynamic password is a password that is valid for only one login session or transaction. It is a unique password that is generated each time a user logs in, using an algorithm or a token. Once the user logs in, the password expires and cannot be used again. This type of password is also known as a token password, as it is generated by a token.
One-time passwords are used to provide an additional layer of security to user accounts. They are particularly useful when it comes to remote access and online transactions. One-time passwords reduce the risk of password theft, as they cannot be reused, even if they are intercepted.
Dynamic passwords are used by some two-factor authentication systems, in which a user is required to provide two types of authentication before accessing a system or application. One factor is typically a password or PIN, and the second factor is a one-time password generated by a token, a smartphone app, or sent via SMS.
In contrast, a static password (option C) is a password that does not change over time and is vulnerable to brute-force attacks or password guessing. A cognitive password (option B) is a type of password that is based on something the user knows, such as a question or phrase. While a passphrase (option D) is a long and complex password made up of several words, it is still a static password, and therefore not as secure as a one-time or dynamic password.
In summary, a one-time or dynamic password provides maximum security as it is unique, changes with each login session, and cannot be reused, making it more difficult for hackers to steal or guess.