Which authentication method works across SaaS, internal apps, offline?
An organization wants to improve the company's security authentication method for remote employees. Given the following requirements: • Must work across SaaS and internal network applications • Must be device manufacturer agnostic • Must have offline capabilities Which of the following would be the most appropriate authentication method?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
Time-based tokens (TOTP) are the only option that satisfies all three requirements: cross-platform compatibility, device-manufacturer agnosticism, and offline capability, while other options fail at least one condition.
This question tests authentication methods for remote employees. Time-based tokens (TOTP) are confirmed as the correct answer because they work across SaaS and internal applications, are device-agnostic, and support offline use.
Common mistake is selecting SMS verification because it is a common 2FA method, but it requires network connectivity and is tied to a phone number/provider, not offline-capable or device-agnostic.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Time-based tokens (TOTP) generate a one-time passcode based on a shared secret and the current time, typically changing every 30 seconds. These tokens can be generated by authenticator apps (e.g., Google Authenticator, Microsoft Authenticator) or hardware devices, making them device-manufacturer agnostic. Because the code is generated locally using time, it works offline without needing SMS or internet connectivity. TOTP integrates with SaaS and internal applications via standard protocols like TOTP RFC 6238, satisfying all requirements.
Why the Other Options Are Wrong
A. Username and password is not an authentication method that meets the listed requirements—it lacks strong security and does not have offline capability in the sense of a generated token. B. Biometrics require specific hardware (fingerprint scanners, cameras) that is not device-manufacturer agnostic and may not work offline across all apps. C. SMS verification requires cellular network connectivity, so it fails the offline capability requirement and is tied to a phone carrier/provider, making it less platform-agnostic.
Community Comment Notes
Community comments unanimously chose D, with one explaining that "These tokens generate a unique code that changes every 30 or 60 seconds. They work across various platforms including SaaS and internal applications, are device manufacturer agnostic and can be used offline." Another commenter correctly identified that time-based tokens like those from Google Authenticator or Microsoft Authenticator meet all the criteria. No dissenting comments or alternative answers were provided, reinforcing the consensus that D is correct.
Official Reference
Exam Strategy
When a question lists multiple requirements (cross-platform, device-agnostic, offline), evaluate each option against every condition. TOTP is the go-to answer because it uses a shared secret and time, not network connectivity or proprietary hardware. Eliminate options that inherently require network (SMS) or specific hardware (biometrics).
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →