nerdexam
(ISC)2

CGRC · Question #17

Authentication ensures that system users are who they say the are. At Colvine Tech, a system user must prove identity by providing an email address, a password, and answer a security question before…

The correct answer is C. Single-factor authentication. The scenario describes a user providing an email address, a password, and answering a security question, all of which fall under the single authentication factor of 'something you know.'

Implementation of Security and Privacy Controls

Question

Authentication ensures that system users are who they say the are. At Colvine Tech, a system user must prove identity by providing an email address, a password, and answer a security question before being given logical access What factor of authentication fits this requirement? Response:

Options

  • AMulti-factor authentication
  • BAuthentication and accountability
  • CSingle-factor authentication
  • DDual-factor authentication

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    91% (21)

Why each option

The scenario describes a user providing an email address, a password, and answering a security question, all of which fall under the single authentication factor of 'something you know.'

AMulti-factor authentication

Multi-factor authentication requires using two or more *different* authentication factors, such as something you know, something you have, or something you are, which is not met by the given example.

BAuthentication and accountability

'Authentication and accountability' describes a broader security principle and is not a specific type of authentication factor or mechanism for proving identity.

CSingle-factor authenticationCorrect

All three elements-email address, password, and security question-belong to the 'something you know' authentication factor. To achieve multi-factor authentication, at least two *different* factors (e.g., something you know and something you have) must be used.

DDual-factor authentication

Dual-factor authentication is a specific type of multi-factor authentication involving exactly two distinct factors; this scenario only utilizes one factor type.

Concept tested: Authentication Factors (Something You Know)

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63b.pdf

Topics

#Authentication factors#Single-factor authentication#Access control#Identity management

Community Discussion

No community discussion yet for this question.

Full CGRC Practice