nerdexam
CompTIA

220-802 · Question #659

A company has decided that all remote users need to use two-factor authentication to increase security. Several remote users have reported losing the RSA token and have replaced it several times…

The correct answer is A. Use biometrics instead of the RSA token. Biometrics (such as fingerprints or facial recognition) satisfy the second authentication factor and cannot be physically lost or misplaced, directly solving the problem of users repeatedly losing RSA tokens.

Hardware

Question

A company has decided that all remote users need to use two-factor authentication to increase security. Several remote users have reported losing the RSA token and have replaced it several times. Which of the following is the solution for these users?

Options

  • AUse biometrics instead of the RSA token.
  • BRemove the RSA token requirement for any user that has lost an RSA token.
  • CGive the users with lost RSA tokens RFID badges instead.
  • DAttach the RSA token to the lid of the laptop.

How the community answered

(50 responses)
  • A
    72% (36)
  • B
    16% (8)
  • C
    8% (4)
  • D
    4% (2)

Why each option

Biometrics (such as fingerprints or facial recognition) satisfy the second authentication factor and cannot be physically lost or misplaced, directly solving the problem of users repeatedly losing RSA tokens.

AUse biometrics instead of the RSA token.Correct

Biometric authentication uses an inherence factor (something you are) rather than a possession factor (something you have), meaning the authenticator is permanently bound to the user's physical characteristics. Replacing RSA tokens with biometrics eliminates the loss problem entirely while still maintaining two-factor authentication by combining biometrics with a password. This is a scalable and more secure long-term solution for remote users.

BRemove the RSA token requirement for any user that has lost an RSA token.

Removing the RSA token requirement for users who have lost tokens undermines the entire two-factor authentication policy and reduces security rather than improving it.

CGive the users with lost RSA tokens RFID badges instead.

RFID badges are still a physical possession factor and can be lost just as easily as an RSA token, not solving the underlying problem.

DAttach the RSA token to the lid of the laptop.

Attaching the token to the laptop lid is a physical workaround that does not prevent loss - a user who loses the laptop also loses the token, and the token is still a separate losable physical item.

Concept tested: Replacing physical tokens with biometric two-factor authentication

Source: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-howitworks

Topics

#biometrics#RSA token#two-factor authentication#security policy

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 220-802 Practice