nerdexam
(ISC)2

CGRC · Question #457

An authentication method uses smart cards as well as usernames and passwords for authentication. Which of the following authentication methods is being referred to? Response:

The correct answer is B. Multi-factor. The question describes an authentication scenario where users prove their identity using a combination of smart cards and usernames/passwords, asking for the technical term for this approach.

Selection and Approval of Framework, Security, and Privacy Controls

Question

An authentication method uses smart cards as well as usernames and passwords for authentication. Which of the following authentication methods is being referred to? Response:

Options

  • AAnonymous
  • BMulti-factor
  • CBiometrics
  • DMutual

How the community answered

(51 responses)
  • A
    2% (1)
  • B
    94% (48)
  • C
    4% (2)

Why each option

The question describes an authentication scenario where users prove their identity using a combination of smart cards and usernames/passwords, asking for the technical term for this approach.

AAnonymous

Anonymous authentication does not require any credentials and does not verify the user's identity, which is contrary to the scenario described.

BMulti-factorCorrect

Multi-factor authentication (MFA) requires a user to provide two or more distinct pieces of evidence (factors) to verify their identity. A smart card represents "something you have" (possession factor), and a username/password represents "something you know" (knowledge factor), combining them for enhanced security.

CBiometrics

Biometrics is an authentication factor based on "something you are" (e.g., fingerprint, facial scan), which is not mentioned as part of this specific combination.

DMutual

Mutual authentication is where both the client and the server authenticate each other, rather than just the client authenticating to the server, and does not describe the number of factors used by the client.

Concept tested: Multi-Factor Authentication (MFA)

Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

Topics

#Authentication#Multi-factor authentication (MFA)#Security controls

Community Discussion

No community discussion yet for this question.

Full CGRC Practice