Study. uk . com
  1. Home
  2. All questions
  3. Question 328

CISSP study material · question 328 of 500

A service issues each user a printed sheet of one-time codes for use if their phone is lost. In NIST SP 800-63B terms, what is this authenticator, and which factor does it represent?

  1. A look-up secret, counted as something you have.
  2. A single-factor one-time password device, counted as something you have.
  3. An out-of-band device, counted as something you have.
  4. An activation secret, counted as something you know.
Show the answer

Answer: A. A look-up secret, counted as something you have.

A look-up secret is a physical or electronic record of secrets shared with the provider, typically used as one-time recovery codes, and it is classed as something you have.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 > 3.1.2 Look-Up Secrets

Challenge yourself on this topic → Study as cards