Q. Consider the following statements regarding Two-Factor Authentication (2FA):
1.It requires identity verification using two distinct elements: a knowledge factor (such as a password) and a possession factor (such as an authenticator app or hardware token).
2.The Time-based One-Time Password (TOTP) standard relies entirely on a continuous mobile internet connection, making it impossible for authentication apps to generate valid verification codes while offline.
Which of the statements given above is/are correct?
Answer: A
Notes:
Explanation:
- Statement 1 is correct: 2FA improves security by adding a second layer of verification beyond standard passwords, making brute-force attacks and credential interception much harder.
- Statement 2 is incorrect: Authenticator apps work completely offline. The TOTP protocol (standardized by the IETF) generates codes locally using a shared cryptographic secret key and the current time counter (typically changing every 30 seconds via HMAC functions), meaning the device does not need an active internet connection to authenticate.
