CGRC · Question #17
Authentication ensures that system users are who they say the are. At Colvine Tech, a system user must prove identity by providing an email address, a password, and answer a security question before…
The correct answer is C. Single-factor authentication. The scenario describes a user providing an email address, a password, and answering a security question, all of which fall under the single authentication factor of 'something you know.'
Question
Authentication ensures that system users are who they say the are. At Colvine Tech, a system user must prove identity by providing an email address, a password, and answer a security question before being given logical access What factor of authentication fits this requirement? Response:
Options
- AMulti-factor authentication
- BAuthentication and accountability
- CSingle-factor authentication
- DDual-factor authentication
How the community answered
(23 responses)- A4% (1)
- B4% (1)
- C91% (21)
Why each option
The scenario describes a user providing an email address, a password, and answering a security question, all of which fall under the single authentication factor of 'something you know.'
Multi-factor authentication requires using two or more *different* authentication factors, such as something you know, something you have, or something you are, which is not met by the given example.
'Authentication and accountability' describes a broader security principle and is not a specific type of authentication factor or mechanism for proving identity.
All three elements-email address, password, and security question-belong to the 'something you know' authentication factor. To achieve multi-factor authentication, at least two *different* factors (e.g., something you know and something you have) must be used.
Dual-factor authentication is a specific type of multi-factor authentication involving exactly two distinct factors; this scenario only utilizes one factor type.
Concept tested: Authentication Factors (Something You Know)
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63b.pdf
Topics
Community Discussion
No community discussion yet for this question.