nerdexam
CompTIA

220-802 · Question #676

In order to establish a VPN to a company firewall, Joe, a technician needed to have an RSA token and provide a user name and password to connect to the main office. This is an example of:

The correct answer is C. Two-factor authentication. Using an RSA token (something you have) combined with a username and password (something you know) is the definition of two-factor authentication.

Networking

Question

In order to establish a VPN to a company firewall, Joe, a technician needed to have an RSA token and provide a user name and password to connect to the main office. This is an example of:

Options

  • APrivacy filters.
  • BExtensive security.
  • CTwo-factor authentication.
  • DBasic authentication.

How the community answered

(58 responses)
  • A
    5% (3)
  • B
    2% (1)
  • C
    91% (53)
  • D
    2% (1)

Why each option

Using an RSA token (something you have) combined with a username and password (something you know) is the definition of two-factor authentication.

APrivacy filters.

Privacy filters are physical screen overlays that prevent visual shoulder-surfing and are unrelated to authentication mechanisms.

BExtensive security.

'Extensive security' is not a recognized technical authentication term or standard.

CTwo-factor authentication.Correct

Two-factor authentication (2FA) requires verification using two distinct factor categories: something you know (the username and password), and something you have (the RSA token that generates a time-based one-time code). Because both factors come from different categories, a compromised password alone is insufficient to gain access. This is standard practice for securing VPN connections to corporate firewalls.

DBasic authentication.

Basic authentication involves only a single factor - a username and password - and does not include a second independent factor like a hardware token.

Concept tested: Two-factor authentication with RSA token and password

Source: https://csrc.nist.gov/glossary/term/multi_factor_authentication

Topics

#two-factor authentication#VPN#RSA token#network security

Community Discussion

No community discussion yet for this question.

Full 220-802 Practice