312-50V11 · Question #115
Steve, a scientist who works in a governmental security agency, developed a technological solution to identify people based on walking patterns and implemented this approach to a physical control acce
The correct answer is B. The solution implements the two authentication factors: physical object and physical characteristic. The scenario combines gait recognition (biometrics) with an RFID badge (possession), which are two distinct authentication factors. This makes it a true two-factor authentication implementation.
Question
Steve, a scientist who works in a governmental security agency, developed a technological solution to identify people based on walking patterns and implemented this approach to a physical control access. A camera captures people walking and identifies the individuals using Steve's approach. After that, people must approximate their RFID badges. Both the identifications are required to open the door. In this case, we can say:
Options
- AAlthough the approach has two phases, it actually implements just one authentication factor
- BThe solution implements the two authentication factors: physical object and physical characteristic
- CThe solution will have a high level of false positives
- DBiological motion cannot be used to identify people
How the community answered
(41 responses)- A2% (1)
- B73% (30)
- C10% (4)
- D15% (6)
Why each option
The scenario combines gait recognition (biometrics) with an RFID badge (possession), which are two distinct authentication factors. This makes it a true two-factor authentication implementation.
The two methods belong to different factor categories - possession and inherence - so this is genuinely two-factor authentication, not a single factor implemented twice.
Authentication factors fall into three categories: something you know, something you have, and something you are. An RFID badge represents 'something you have' (a physical object), while gait recognition represents 'something you are' (a physical/behavioral characteristic). Requiring both factors before granting access is the definition of multi-factor authentication, so the solution correctly implements two distinct factors.
Nothing in the scenario's design inherently produces a high false positive rate; this is a speculative claim not supported by the described implementation.
Gait analysis is an established biometric modality used in real-world physical access control and forensic identification, so the claim that biological motion cannot identify people is factually incorrect.
Concept tested: Multi-factor authentication factor categories
Source: https://csrc.nist.gov/publications/detail/sp/800-63b/final
Topics
Community Discussion
No community discussion yet for this question.