Exam CISSP-ISSAP topic 1 question 57 discussion

B. Key fobs Key fobs are small devices that generate one-time passwords (OTPs) at regular intervals, typically synchronized with server-side systems. Users enter these OTPs along with their existing credentials during authentication. Key fobs act as token-based authenticators, providing an extra layer of security beyond traditional login details. In the context of the scenario where Trade Well Inc. wants users to provide a third key apart from ID and password to access their website, key fobs can serve this purpose effectively by requiring users to have possession of both their credentials and the physical key fob device.