When developing a banking website, what is the advised method to confirm user identities?

Question

Options

• ARequiring password and personal answersa
• BRequiring password and username
• CRequiring password and sms token
• DRequiring password and pin code

• B
  4% (1)
• C
  88% (22)
• D
  8% (2)

Explanation

The recommended method for confirming user identities on a banking website is Multi-Factor Authentication (MFA) using a password combined with an SMS token. This implements the 'something you know' (password) plus 'something you have' (SMS token sent to your phone) factors. A username/password alone (B) is single-factor and easily compromised. A PIN (D) and personal answers (A) are both 'something you know' factors, offering no additional security layer. SMS tokens provide a second independent factor, significantly reducing the risk of unauthorized access even if a password is stolen.

No community discussion yet for this question.