nerdexam
Exams220-1002Questions#663
CompTIA

220-1002 · Question #663

220-1002 Question #663: Real Exam Question with Answer & Explanation

The correct answer is C: PIN. Adding a PIN satisfies the multifactor authentication requirement by introducing an additional device-bound verification step that is distinct from the reusable username and password credentials.

Question

A technician is implementing multifactor authentication for logins to the network. The network already requires a username and password to authenticate users. Which of the following should the technician add to meet the multifactor requirement?

Options

  • APassphrase
  • BKnowledge-based authentication
  • CPIN
  • DThumbprint

Explanation

Adding a PIN satisfies the multifactor authentication requirement by introducing an additional device-bound verification step that is distinct from the reusable username and password credentials.

Common mistakes.

  • A. A passphrase is a variation of a password and falls under the 'something you know' category, the same factor type as the existing password, so it does not introduce a new authentication factor.
  • B. Knowledge-based authentication relies on security questions, which are also classified as 'something you know' and therefore do not add a distinct factor beyond the existing username and password.
  • D. A thumbprint is a biometric 'something you are' factor that is valid for MFA but typically requires dedicated fingerprint reader hardware at each network login point, making it less practical than a device-bound PIN for this network authentication scenario.

Concept tested. Multifactor authentication factor types and MFA implementation

Reference. https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-howitworks

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice