Which credential type provides temporary codes for each access session?

Which credential type provides temporary codes for each access session?

• A. Static password
• B. One-time password (OTP)
• C. Digital certificate
• D. Biometric credential

Answer: (B)

Temporary, single-use codes are designed to change with each login, preventing reuse of credentials across sessions. A one-time password provides a code that is valid only for that specific access attempt and then expires, often generated by an authenticator app, a hardware token, or delivered via SMS. It can be time-based (TOTP) or event-based (HOTP), which ensures the code is fresh for every session. This is different from static passwords, which stay the same across sessions; digital certificates, which are long-lived cryptographic credentials used for encryption and identity at a broader level; and biometric credentials, which rely on unique physical traits rather than ephemeral session codes.

Temporary, single-use codes are designed to change with each login, preventing reuse of credentials across sessions. A one-time password provides a code that is valid only for that specific access attempt and then expires, often generated by an authenticator app, a hardware token, or delivered via SMS. It can be time-based (TOTP) or event-based (HOTP), which ensures the code is fresh for every session. This is different from static passwords, which stay the same across sessions; digital certificates, which are long-lived cryptographic credentials used for encryption and identity at a broader level; and biometric credentials, which rely on unique physical traits rather than ephemeral session codes.