312-50V9 · Question #98
Which of the following is an example of two factor authentication?
The correct answer is D. Fingerprint and Smartcard ID. True two-factor authentication requires credentials from two different factor categories - something you know, something you have, or something you are.
Question
Which of the following is an example of two factor authentication?
Options
- APIN Number and Birth Date
- BUsername and Password
- CDigital Certificate and Hardware Token
- DFingerprint and Smartcard ID
How the community answered
(31 responses)- A6% (2)
- C3% (1)
- D90% (28)
Why each option
True two-factor authentication requires credentials from two different factor categories - something you know, something you have, or something you are.
Both a PIN and a birth date are 'something you know' factors, placing them in the same authentication category and making this single-factor authentication with two knowledge-based credentials.
A username and password are both 'something you know' factors and together represent standard single-factor authentication, not two distinct factor types.
A digital certificate and a hardware token are both classified as 'something you have' possession factors, meaning they belong to the same authentication category and do not constitute two separate factors.
A fingerprint belongs to the 'something you are' category (biometric factor), while a Smartcard ID belongs to the 'something you have' category (possession factor). Because these two credentials come from two distinct authentication factor categories, this combination satisfies the definition of two-factor authentication and provides stronger assurance than using multiple items from the same category.
Concept tested: Two-factor authentication distinct factor category requirements
Source: https://csrc.nist.gov/glossary/term/multi_factor_authentication
Topics
Community Discussion
No community discussion yet for this question.