View all questions & answers for the FCP - FortiAuthenticator 6.5 Administrator Exam Materials exam


Question 10 Discussion

Which of the following is an OATH-based standard to generate event-based, one-time password tokens? (Choose one answer)

  • A. SOTP
  • B. OLTP
  • C. HOTP
  • D. TOTP
Correct Answer: C

Brave-Dump Clients Votes

C 100%

Comments



Juan Diego Ruiz 2025-04-15 22:13:10

Selected Answers: C


C correct, SG page 153:
Standards for Generating OTPs

Two main standards governed by Initiative for Open Authentication (OATH):

Time-based one-time passwords (TOTP)

Time-based: time passed on epoch

Passcodes are generated using combination of time and secret key

Passcodes change at regular intervals and are single-time use (one-time passcode)

FortiAuthenticator validates entered passcode using time and secret key

Fortinet products: FortiToken 200 series and FortiToken Mobile

NTP server

Hash-based one-time passwords (HOTP)

Event-based: counter incremented whenever new OTP is generated

Passcodes are generated using a counter and secret key

Passcodes are incremented and are single-time use (one-time passcode)

Valid until used