Alice initiates a challenge$-$response user authentication protocol to authenticate her to Bob. Bob sends Alice a challenge. Which is not true about the challenge?

The challenge must be un$-$predictable to Alice.

The challenge must be un$-$predictable to Bob.

Alice's response needs to be based on the challenge.

The challenge must not be re$-$used.