nerdexam
EC-Council

312-50V10 · Question #115

Steve, a scientist who works in a governmental security agency, developed a technological solution to identify people based on walking patterns and implemented this approach to a physical control acce

The correct answer is B. The solution implements the two authentication factors: physical object and physical characteristic. The solution combines gait recognition (a physical/biometric characteristic) with an RFID badge (a physical object), satisfying two distinct authentication factors.

Information Security and Ethical Hacking Fundamentals

Question

Steve, a scientist who works in a governmental security agency, developed a technological solution to identify people based on walking patterns and implemented this approach to a physical control access. A camera captures people walking and identifies the individuals using Steve's approach. After that, people must approximate their RFID badges. Both the identifications are required to open the door. In this case, we can say:

Options

  • AAlthough the approach has two phases, it actually implements just one authentication factor
  • BThe solution implements the two authentication factors: physical object and physical characteristic
  • CThe solution will have a high level of false positives
  • DBiological motion cannot be used to identify people

How the community answered

(38 responses)
  • A
    5% (2)
  • B
    79% (30)
  • C
    3% (1)
  • D
    13% (5)

Why each option

The solution combines gait recognition (a physical/biometric characteristic) with an RFID badge (a physical object), satisfying two distinct authentication factors.

AAlthough the approach has two phases, it actually implements just one authentication factor

Both gait recognition and RFID badges belong to different factor categories - biometric and possession respectively - so the solution does implement two distinct authentication factors, not one.

BThe solution implements the two authentication factors: physical object and physical characteristicCorrect

Multi-factor authentication requires proof from two or more different factor categories. The RFID badge represents the 'something you have' factor (a physical object/token), while gait recognition represents the 'something you are' factor (a biometric/physical characteristic). Because these are two separate factor categories, this is a true two-factor authentication implementation.

CThe solution will have a high level of false positives

False positive rates depend on the system's calibration and accuracy; this choice makes an unsupported assumption and does not address the authentication factor classification being tested.

DBiological motion cannot be used to identify people

Gait analysis is a well-established biometric modality - biological motion such as walking patterns has been demonstrated to uniquely identify individuals and is used in real security implementations.

Concept tested: Multi-factor authentication factor categories

Source: https://pages.nist.gov/800-63-3/sp800-63b.html

Topics

#multi-factor authentication#biometrics#RFID#physical access control

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V10 Practice