220-802 · Question #676
In order to establish a VPN to a company firewall, Joe, a technician needed to have an RSA token and provide a user name and password to connect to the main office. This is an example of:
The correct answer is C. Two-factor authentication. Using an RSA token (something you have) combined with a username and password (something you know) is the definition of two-factor authentication.
Question
In order to establish a VPN to a company firewall, Joe, a technician needed to have an RSA token and provide a user name and password to connect to the main office. This is an example of:
Options
- APrivacy filters.
- BExtensive security.
- CTwo-factor authentication.
- DBasic authentication.
How the community answered
(58 responses)- A5% (3)
- B2% (1)
- C91% (53)
- D2% (1)
Why each option
Using an RSA token (something you have) combined with a username and password (something you know) is the definition of two-factor authentication.
Privacy filters are physical screen overlays that prevent visual shoulder-surfing and are unrelated to authentication mechanisms.
'Extensive security' is not a recognized technical authentication term or standard.
Two-factor authentication (2FA) requires verification using two distinct factor categories: something you know (the username and password), and something you have (the RSA token that generates a time-based one-time code). Because both factors come from different categories, a compromised password alone is insufficient to gain access. This is standard practice for securing VPN connections to corporate firewalls.
Basic authentication involves only a single factor - a username and password - and does not include a second independent factor like a hardware token.
Concept tested: Two-factor authentication with RSA token and password
Source: https://csrc.nist.gov/glossary/term/multi_factor_authentication
Topics
Community Discussion
No community discussion yet for this question.