nerdexam
Cisco

200-301 · Question #1693

What describes multifactor authentication in security password policies?

The correct answer is C. It uses factors from at least two different categories to identify all users.. Multifactor authentication (MFA) enhances security by requiring a user to present at least two distinct verification factors from different categories (e.g., something you know, something you have, something you are).

Submitted by yuki_2020· Mar 5, 2026Security Fundamentals

Question

What describes multifactor authentication in security password policies?

Options

  • AIt enables a cryptographic link between a public key and the owning entity.
  • BIt applies biological characteristics to authenticate and access the system.
  • CIt uses factors from at least two different categories to identify all users.
  • DIt uses an application programming interface to access the data of the operating system.

How the community answered

(55 responses)
  • A
    7% (4)
  • B
    2% (1)
  • C
    87% (48)
  • D
    4% (2)

Why each option

Multifactor authentication (MFA) enhances security by requiring a user to present at least two distinct verification factors from different categories (e.g., something you know, something you have, something you are).

AIt enables a cryptographic link between a public key and the owning entity.

This describes the purpose of digital certificates or public key infrastructure (PKI), not multifactor authentication directly.

BIt applies biological characteristics to authenticate and access the system.

While biometrics (biological characteristics) can be one factor in MFA (something you are), MFA itself requires at least two *different* categories, not just one type of factor.

CIt uses factors from at least two different categories to identify all users.Correct

Multifactor authentication (MFA) requires users to provide two or more distinct verification factors to gain access to a resource, drawing from different categories such as knowledge (password), possession (token, phone), or inherence (fingerprint, face scan).

DIt uses an application programming interface to access the data of the operating system.

An application programming interface (API) is a set of rules for software interaction and has no direct relation to the concept of multifactor authentication.

Concept tested: Multifactor Authentication (MFA) definition

Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

Topics

#Multifactor authentication#MFA#Authentication policies

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 200-301 Practice