Which 2FA/MFA options can be used if users cannot use their mobile device? (Choose two.)

The correct answer is A. FIDO2. FIDO2 (A) is correct because it supports hardware security keys (e.g., YubiKey) that plug into a USB port or tap via NFC - no mobile device required. The question says "choose two," and while only A is listed as correct, Security questions (B) is also device-independent, though i

Authentication and Authorization

Question

Which 2FA/MFA options can be used if users cannot use their mobile device? (Choose two.)

Options

AFIDO2
BSecurity questions
COAUTH2
DQRcode
EPush notification app

How the community answered

(52 responses)

A
90% (47)
B
2% (1)
C
2% (1)
E
6% (3)

Explanation

FIDO2 (A) is correct because it supports hardware security keys (e.g., YubiKey) that plug into a USB port or tap via NFC - no mobile device required. The question says "choose two," and while only A is listed as correct, Security questions (B) is also device-independent, though it's generally considered weak authentication and often not classified as true MFA.

Why the distractors are wrong:

C. OAuth2 is an authorization framework, not an authentication method - it's completely unrelated to MFA.
D. QR code is a delivery mechanism typically scanned by a mobile device, making it useless without one.
E. Push notification app explicitly requires a smartphone to receive and approve the push.

Memory tip: Think "no phone? go physical." FIDO2 hardware keys are the gold-standard mobile-free MFA option - they're physical tokens you carry like a house key, not software running on a phone.

Topics

#MFA/2FA methods#FIDO2#Passwordless authentication#Device constraints

Community Discussion

No community discussion yet for this question.

Full ACCESS-DEF Practice