Github Foundations · Free Practice Question Easy
Question 19
GitHub supports using a TOTP app for two-factor authentication. How would you configure GitHub to use a TOTP app?
-
A
Use the recovery codes generated by GitHub for TOTP setup
-
B
Scan the QR code provided by GitHub with the TOTP app
-
C
use a required GitHub approved TOTP app
-
D
Receive a confirmation email from GitHub with TOTP setup instructions
Reveal correct answer
Correct answer: B
Explanation
You can configure two-factor authentication (2FA) using a TOTP app on mobile or desktop. Under the "Setup authenticator app" section within user settings, GitHub provides a Scan the QR code with your mobile device's app. After scanning, the app displays a six-digit code that you can enter on GitHub. If you can't scan the QR code, click setup key to see a code, the TOTP secret, that you can manually enter in your TOTP app instead.
****************
WRONG ANSWERS:
GitHub is app-agnostic when it comes to TOTP apps, so you have the freedom to choose any TOTP app you prefer. GitHub does not maintain an approved list of TOTP apps.
GitHub typically uses QR code scanning or manual entry for TOTP setup, and confirmation is not typically sent via email for TOTP configuration
Recovery codes are typically used as an alternative method for account recovery, not for TOTP setup.
A. This choice is incorrect because recovery codes generated by GitHub are used as a backup method for accessing your account if you lose access to your TOTP app. They are not used for setting up TOTP authentication initially.
B. This choice is correct because to configure GitHub to use a TOTP app, you need to scan the QR code provided by GitHub with the TOTP app. This QR code is used to link your TOTP app to your GitHub account for two-factor authentication.
C. This choice is incorrect because GitHub does not require the use of a specific TOTP app. Users can choose any TOTP app that supports the TOTP protocol, such as Google Authenticator or Authy, to set up two-factor authentication.
D. This choice is incorrect because GitHub does not typically use email for setting up TOTP authentication. The standard method involves scanning a QR code with a TOTP app to generate the necessary codes for two-factor authentication.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
