Which 2FA/MFA options can fulfill the "Something you are" requirement? (Choose two.)

Question

Options

• Aemail
• BCyberArk Identity mobile app
• CFIDO2
• Dphone call
• Esecurity questions

• A
  5% (2)
• B
  89% (34)
• C
  3% (1)
• D
  3% (1)

Explanation

Note: The question asks for two answers, but only B is listed as correct - this may be an error in the provided answer key, or the second answer could be C (FIDO2) when used with a biometric authenticator. The explanation below covers both possibilities.

B (CyberArk Identity mobile app) satisfies "Something you are" because it supports biometric authentication - fingerprint or facial recognition - which is a physical characteristic of the user's body, the definition of an inherence factor. C (FIDO2) can also qualify when a biometric (fingerprint/Face ID) is used to unlock the authenticator, though FIDO2 hardware keys alone are typically classified as "Something you have."

The distractors belong to different factor categories: A (email) and D (phone call) are "Something you have" - they prove possession of a communication channel; E (security questions) is "Something you know" - a knowledge factor stored in memory.

Memory tip: "Something you are" = your body - think biometric (bio = life/body). If you can't scan, snap, or swipe a body part to use it, it's not an inherence factor.

No community discussion yet for this question.