Challenge/Response works in such a way that at the logon process users will be challenged with a code, and the user will need to provide a code that responds to the challenge code. In general, users generate the response code by using a device, such as a hardware token, mobile app or a grid card.