Which authentication method works across SaaS, internal apps, offline?

SY0-701 By islever Editorial Last updated

Short answer

D Time-based tokens

Question

An organization wants to improve the company's security authentication method for remote employees. Given the following requirements: • Must work across SaaS and internal network applications • Must be device manufacturer agnostic • Must have offline capabilities Which of the following would be the most appropriate authentication method?
  1. Username and password
  2. Biometrics
  3. SMS verification
  4. Time-based tokens Correct Answer

Key Takeaways

Time-based tokens (TOTP) are the only option that satisfies all three requirements: cross-platform compatibility, device-manufacturer agnosticism, and offline capability, while other options fail at least one condition.

This question tests authentication methods for remote employees. Time-based tokens (TOTP) are confirmed as the correct answer because they work across SaaS and internal applications, are device-agnostic, and support offline use.

Common mistake: Common mistake is selecting SMS verification because it is a common 2FA method, but it requires network connectivity and is tied to a phone number/provider, not offline-capable or device-agnostic.

Expert Analysis

Why the Answer Is Correct

Time-based tokens (TOTP) generate a one-time passcode based on a shared secret and the current time, typically changing every 30 seconds. These tokens can be generated by authenticator apps (e.g., Google Authenticator, Microsoft Authenticator) or hardware devices, making them device-manufacturer agnostic. Because the code is generated locally using time, it works offline without needing SMS or internet connectivity. TOTP integrates with SaaS and internal applications via standard protocols like TOTP RFC 6238, satisfying all requirements.

Why the Other Options Are Wrong

A. Username and password is not an authentication method that meets the listed requirements—it lacks strong security and does not have offline capability in the sense of a generated token. B. Biometrics require specific hardware (fingerprint scanners, cameras) that is not device-manufacturer agnostic and may not work offline across all apps. C. SMS verification requires cellular network connectivity, so it fails the offline capability requirement and is tied to a phone carrier/provider, making it less platform-agnostic.

Community Comment Notes

Community comments unanimously chose D, with one explaining that "These tokens generate a unique code that changes every 30 or 60 seconds. They work across various platforms including SaaS and internal applications, are device manufacturer agnostic and can be used offline." Another commenter correctly identified that time-based tokens like those from Google Authenticator or Microsoft Authenticator meet all the criteria. No dissenting comments or alternative answers were provided, reinforcing the consensus that D is correct.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

When a question lists multiple requirements (cross-platform, device-agnostic, offline), evaluate each option against every condition. TOTP is the go-to answer because it uses a shared secret and time, not network connectivity or proprietary hardware. Eliminate options that inherently require network (SMS) or specific hardware (biometrics).

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. a4e15bd 👍 9
    D. Time-based tokens These tokens generate a unique code that changes every 30 or 60 seconds. They work across various platforms including SaaS and internal applications, are device manufacturer agnostic and can be used offline.
  2. 9149f41 👍 2 Answered D
    Time-based Tokens is the One-Time Password (OTP) used in two-factor authentication (2FA) systems. When you enable 2FA for your online accounts, you often receive a temporary code via SMS or an authentication app that expires after a short period (usually 30 seconds to a few minutes). time-based tokens, like those generated by authentication apps (e.g., Google Authenticator, Microsoft Authenticator), can work offline. These apps use a shared secret key and the current time to generate a unique OTP (One-Time Password) that doesn't require an internet connection.
  3. Cee007 👍 1 Answered D
    D. Time-based tokens. Time-based tokens work across various platforms including SaaS and internal applications, are device manufacturer agnostic and can be used offline.
  4. fmeox567 👍 1 Answered D
    D. Time-based tokens GPT

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide