Which term corresponds to a temporary password valid for a single session?

Which term corresponds to a temporary password valid for a single session?

• A. Audit controls
• B. One-Time Password (OTP)
• C. Biometric Authentication
• D. Principle of Least Privilege

Answer: (B)

A password that is valid for a single login session is an One-Time Password. An OTP is designed to be used once and then expires, which helps prevent replay attacks because even if someone intercepts it, it cannot be reused for another session. OTPs are commonly generated by authenticator apps or hardware tokens or delivered by a one-time channel (like SMS or email) and are often used as part of two-factor authentication to add a dynamic, short-lived credential layer. The other options don’t fit this concept: audit controls are about monitoring and recording activities; biometric authentication relies on something you are (biometrics) rather than a password; and the principle of least privilege is about restricting access rights to the minimum necessary. Hence, the one-time password best matches the description.

A password that is valid for a single login session is an One-Time Password. An OTP is designed to be used once and then expires, which helps prevent replay attacks because even if someone intercepts it, it cannot be reused for another session. OTPs are commonly generated by authenticator apps or hardware tokens or delivered by a one-time channel (like SMS or email) and are often used as part of two-factor authentication to add a dynamic, short-lived credential layer.

The other options don’t fit this concept: audit controls are about monitoring and recording activities; biometric authentication relies on something you are (biometrics) rather than a password; and the principle of least privilege is about restricting access rights to the minimum necessary. Hence, the one-time password best matches the description.