Question

Which of the following reasons is not a reason to avoid using SMS as a second factor for authentication?

A.SMS via VoIP is easy to target
B.SMS is insecure
C.SMS cannot send unique tokens
D.VoIP management often uses the same password as the account

Answer 1

The incorrect reason to avoid using SMS as a second factor for authentication is that SMS cannot send unique tokens as it can indeed send them. The concerns about SMS involve its susceptibility to interception and the potential compromise of VoIP services.

Step-by-step explanation:

The subject at hand is two-factor authentication (2FA) using SMS. Among the provided reasons for avoiding SMS as a second factor, C. SMS cannot send unique tokens is the incorrect one. This is because SMS can, in fact, send unique tokens to your phone as part of a 2FA process. These tokens are used to verify your identity in conjunction with something you know (such as a password).

Concerns about SMS for 2FA involve its susceptibility to interception or redirection, especially if an attacker is targeting VoIP services (A. SMS via VoIP is easy to target). The insecurity of SMS (B) is acknowledged due to the potential for interception, and the risk that VoIP management might be compromised using the same password as the account (D) is also a legitimate concern.