312-50V11 · Question #297
Which set of access control solutions implements two-factor authentication?
The correct answer is A. USB token and PIN. Two-factor authentication requires two different categories of factors. A USB token (something you have) combined with a PIN (something you know) satisfies this requirement.
Question
Which set of access control solutions implements two-factor authentication?
Options
- AUSB token and PIN
- BFingerprint scanner and retina scanner
- CPassword and PIN
- DAccount and password
How the community answered
(25 responses)- A92% (23)
- C4% (1)
- D4% (1)
Why each option
Two-factor authentication requires two different categories of factors. A USB token (something you have) combined with a PIN (something you know) satisfies this requirement.
Two-factor authentication is defined as using two distinct categories of credentials: something you have, something you know, or something you are. A USB token falls under 'something you have' and a PIN falls under 'something you know', making this the only pairing that crosses category boundaries and satisfies the two-factor requirement.
A fingerprint scanner and retina scanner are both 'something you are' (biometrics), meaning they represent the same single category and therefore only constitute one factor.
A password and a PIN are both 'something you know', placing them in the same single category and failing to meet the two-factor requirement.
An account name and a password are both 'something you know', so this is single-factor authentication despite involving two inputs.
Concept tested: Multi-factor authentication categories and requirements
Source: https://csrc.nist.gov/glossary/term/multi_factor_authentication
Topics
Community Discussion
No community discussion yet for this question.