Which authentication method supports multi-factor authentication natively?

Question

Options

• ALDAP
• BRADIUS
• CHTTP Auth
• DKerberos

• A
  3% (1)
• B
  81% (26)
• C
  13% (4)
• D
  3% (1)

Explanation

RADIUS natively supports MFA through its built-in challenge-response mechanism, which allows it to prompt users for additional authentication factors (like a one-time password or token) after initial credential submission - making it the standard protocol for MFA in network access control scenarios.

Why the others are wrong:

• LDAP (A) is a directory lookup protocol for querying user records; it handles single-factor (username/password) bind operations and has no built-in challenge-response mechanism for additional factors.
• HTTP Auth (C) (Basic/Digest) transmits credentials in a single request/response exchange with no mechanism to request a second factor mid-authentication.
• Kerberos (D) uses a ticket-based, symmetric-key system designed for SSO; it doesn't have a native second-factor challenge step, though it can be extended (e.g., via smart card PKINIT).

Memory tip: Think of RADIUS as the "checkpoint with multiple gates" - it can stop you mid-login and demand another form of proof before issuing access. The "challenge-response" step is the giveaway on exams.

No community discussion yet for this question.