MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

TOTP stands for what in cybersecurity?
a. Time-Out Token Protocol
b. Time-Based One-Time Password
c. Token Oriented Time Password
d. Timed Output Token Phrase
Answer: b. Time-Based One-Time Passwordfrontegg+1
TOTP is primarily used for which purpose?
a. Data encryption
b. Two-factor authentication
c. Session key generation
d. Network routing
Answer: b. Two-factor authenticationtechtarget+1
The TOTP algorithm is standardized under which RFC?
a. RFC 4186
b. RFC 6238
c. RFC 5321
d. RFC 7539
Answer: b. RFC 6238loginradius+1
Which two elements are used to generate a TOTP?
a. User password and IP address
b. Shared secret key and current time
c. Username and salt
d. Random seed and counter value
Answer: b. Shared secret key and current timetestbook+1
What is the typical validity duration for a TOTP code?
a. 1 minute
b. 30 seconds
c. 5 minutes
d. 10 seconds
Answer: b. 30 secondsloginradius+1
TOTP is based on which cryptographic concept?
a. HMAC (Hash-based Message Authentication Code)
b. Symmetric encryption
c. Elliptic curve cryptography
d. RSA signatures
Answer: a. HMAC (Hash-based Message Authentication Code)teampassword+1
Common hash algorithms used with TOTP include:
a. MD5, SHA-1, and SHA-2
b. HMAC-SHA1, HMAC-SHA256, HMAC-SHA512
c. SHA3-256 only
d. DES and HMAC
Answer: b. HMAC-SHA1, HMAC-SHA256, HMAC-SHA512eitca+1
Which of the following apps generates TOTP codes?
a. Google Authenticator
b. Zoom
c. Microsoft Word
d. Cisco WebEx
Answer: a. Google Authenticatortechtarget+1
TOTP is considered a type of what authentication factor?
a. Knowledge factor
b. Possession factor
c. Location factor
d. Inherence factor
Answer: b. Possession factorloginradius+1
TOTP codes can typically be how many digits long?
a. 4
b. 6 or 8
c. 12
d. 16
Answer: b. 6 or 8teampassword+1
During setup, a shared secret key is most often distributed via:
a. Bluetooth signal
b. Email attachment
c. QR code
d. SMS message
Answer: c. QR codeloginradius+1
Which problem does TOTP resolve in comparison to HOTP?
a. Counter desynchronization
b. Server overload
c. Encryption delay
d. Password reuse
Answer: a. Counter desynchronizationrublon+1
What is a major risk if device and server clocks are not synchronized?
a. Hash collision
b. Authentication failure
c. Key revocation
d. Buffer overflow
Answer: b. Authentication failureeitca+1
How does TOTP enhance security?
a. Passwords never expire
b. Codes change frequently
c. Users reuse tokens
d. It encrypts data streams
Answer: b. Codes change frequentlyfrontegg+1
TOTP tokens are verified by:
a. Comparing generated and provided values
b. Sending to a blockchain
c. Checking against an IP whitelist
d. Using digital certificates
Answer: a. Comparing generated and provided valueseitca+1
Which of the following is NOT a vulnerability of TOTP?
a. Phishing attacks
b. Time desynchronization
c. Memory overflow
d. Man-in-the-middle attacks
Answer: c. Memory overfloweitca
What is the usual length of TOTP validity window?
a. 10 seconds
b. 30 seconds
c. 2 minutes
d. 1 millisecond
Answer: b. 30 secondstechtarget+1
TOTP tokens can be generated offline because:
a. They depend only on internal clocks
b. They use cloud services
c. They require server validation
d. They depend on live internet data
Answer: a. They depend only on internal clocksteampassword+1
The server and client must share what for TOTP to work?
a. Blockchain node
b. Secret key
c. Public certificate
d. Device ID
Answer: b. Secret keyloginradius+1
Which of the following best describes TOTP-based authentication?
a. Event-based password change
b. Time-synchronized one-time code generation
c. Biometric key mapping
d. Machine-to-machine encryption
Answer: b. Time-synchronized one-time code generationteampassword+1
The primary RFC defining HOTP is:
a. RFC 4226
b. RFC 6238
c. RFC 6960
d. RFC 3510
Answer: a. RFC 4226pages.nist+1
TOTP builds upon HOTP by integrating what component?
a. Event counter
b. Timestamp
c. IV key
d. Session ID
Answer: b. Timestamprublon+1
What prevents TOTP from being reused successfully?
a. Short expiration time
b. Numeric limitation
c. Shared secret randomization
d. Use of weak hashing
Answer: a. Short expiration timemojoauth+1
Why is HMAC-SHA1 still used for TOTP despite newer algorithms?
a. It is defined in RFC 6238
b. It offers one-way functionality
c. It supports reverse hashing
d. It provides symmetric encryption
Answer: a. It is defined in RFC 6238pages.nist+1
TOTP relies on what form of time measurement?
a. Unix time
b. Local timezone name
c. GMT offset
d. Leap seconds
Answer: a. Unix timeloginradius+1
If device time drifts significantly, TOTP verification may:
a. Be temporarily accepted
b. Fail due to mismatch
c. Regenerate automatically
d. Synchronize its clock online
Answer: b. Fail due to mismatcheitca+1
Which of the following is TRUE about TOTP’s offline generation?
a. Requires server connection
b. Relies on internet access
c. Works independently of network
d. Needs a cloud key
Answer: c. Works independently of networktechtarget+1
In TOTP, the hash output is truncated and reduced using:
a. Base64 conversion
b. Modulo operation
c. Symmetric encryption
d. Key stretching
Answer: b. Modulo operationteampassword+1
How is the shared secret typically stored on user devices?
a. Encrypted in authenticator app storage
b. As plaintext in SMS
c. Publicly on the web
d. In temporary memory
Answer: a. Encrypted in authenticator app storageloginradius+1
What mitigates time drift problems in TOTP systems?
a. Tolerance windows
b. Random delays
c. Time caching
d. Key reseeding
Answer: a. Tolerance windowseitca+1
TOTP can be described as what type of factor in MFA?
a. Something you know
b. Something you have
c. Something you are
d. Somewhere you are
Answer: b. Something you haveloginradius+1
Which is a benefit of TOTP over HOTP?
a. Prevents password reuse
b. Works without time sync
c. Doesn’t expire
d. Needs fewer keys
Answer: a. Prevents password reusemojoauth+1
What typically causes a failure in TOTP verification?
a. Excessive time difference
b. Long password length
c. Weak secret encryption
d. Small modulus value
Answer: a. Excessive time differenceteampassword+1
Which function generates the hash in TOTP?
a. Symmetric cipher
b. HMAC function
c. RSA signature
d. Diffie-Hellman
Answer: b. HMAC functionloginradius+1
The TOTP algorithm changes the password based on:
a. Random algorithm variations
b. Fixed time intervals
c. Server load
d. User command
Answer: b. Fixed time intervalsteampassword+1
Which entity verifies the authenticity of TOTP input during login?
a. Client only
b. Authentication server
c. DNS server
d. Browser cache
Answer: b. Authentication servereitca+1
What is a common security drawback of using SMS-based TOTPs?
a. Time desync
b. Interceptable messages
c. Slow refresh time
d. Offline inaccessibility
Answer: b. Interceptable messagesloginradius+1
The “truncation” step in TOTP serves to:
a. Reduce hash to shorter numeric code
b. Encrypt code using AES
c. Extend key size
d. Append salt to password
Answer: a. Reduce hash to shorter numeric codeloginradius+1
The shared key in TOTP must be:
a. Secret and random
b. Public and consistent
c. User-generated
d. Derived from session data
Answer: a. Secret and randomteampassword+1
Common authenticator apps using TOTP include:
a. Authy, Duo, Microsoft Authenticator
b. Alexa and Siri
c. Zoom Mobile
d. Telegram OTP
Answer: a. Authy, Duo, Microsoft Authenticatorloginradius+1
TOTP can also be used for:
a. VPN authentication
b. File decryption
c. Database indexing
d. API rate limiting
Answer: a. VPN authenticationloginradius+1
TOTP relies on which key exchange model?
a. Pre-shared secret
b. Asymmetric key pair
c. Hybrid encryption
d. Certificate-based
Answer: a. Pre-shared secretteampassword+1
What is the output format of most TOTPs?
a. Numeric
b. Hexadecimal
c. Binary
d. Alphanumeric
Answer: a. Numericeitca+1
What makes TOTP less resistant to phishing?
a. Codes can be socially engineered
b. Algorithm is guessable
c. Keys are stored in plaintext
d. Tokens never expire
Answer: a. Codes can be socially engineeredeitca
The advantage of TOTP’s short window is:
a. Increased login retries
b. Reduced replay attack risk
c. Simplified user management
d. Slower authentication
Answer: b. Reduced replay attack riskrublon+1
TOTP is an example of which security principle?
a. Dynamic authentication
b. Static encryption
c. Key escrow
d. Trusted computing
Answer: a. Dynamic authenticationeitca+1
Why is TOTP preferred over HOTP in most systems?
a. Enhanced time-based security
b. Requires no shared key
c. Supports cloud synchronization
d. Uses larger output
Answer: a. Enhanced time-based securitymojoauth+1
Which organization standardized the TOTP algorithm?
a. IETF
b. ISO
c. IEEE
d. NIST
Answer: a. IETFpages.nist+1
When implementing TOTP, the time interval is usually set to:
a. 30 seconds
b. 15 seconds
c. 300 seconds
d. 1 hour
Answer: a. 30 secondstechtarget+1
In TOTP, the main function of the modulo operation is to:
a. Generate numeric OTP from hash
b. Multiply hash for encryption
c. Reset timestamp
d. Refresh shared keys
Answer: a. Generate numeric OTP from hashloginradius+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info