Challenge Response Configuration Introduction and Concepts

Managing Knowledge-Based Authentication 7-5 question from category D. This continues in a round robin fashion as needed. If there are any categories with an insufficient number of questions or an insufficient number of categories duplicate questions can result. The following is an example of a configuration to avoid: ■ Number of questions user registers: 3 The number of questions that a user must register. The new user registration should display the same number of question menus as the number of questions that a user must register. ■ Number of questions per menu: 5 The number of questions that appear on each menu. The new user registration should display the same number of questions in each menu as the number of categories for each menu. The total number of questions from all the menus number of questions multiplied by the questions in each menu cannot exceed the total number of questions available in the database. ■ Number of categories per menu: 5 The number of categories per menu. The new user registration should display the same number of categories for each menu as the number of questions in each menu. The Question Set is the fixed set of questions that is allotted to the user. This set is allotted at random and once for the user. This is to avoid the user from discovering all the questions. In the example, fifteen or more categories are required, each with at least one question enabled. But if there are fewer than 15 categories and one of these categories has only one question enabled, some Question Sets have that question twice. The algorithm tries to use as many available categories as possible. For example to generate a Question Set with: ■ 3 menus ■ 5 questions per menu ■ 5 categories per menu The algorithm tries to pick one question each from 15 categories if 15 categories are available. The minimum number of questions per category should be equal to the number of questions in the Question Set divided by the total number of categories. Pre-requisite for Configuring Registration Logic for Locales The deployment administrator must ensure that there are enough questions in the