CISSP · Question #223
The BEST example of the concept of "something that a user has" when providing an authorized user access to a computing system is
The correct answer is B. a credential stored in a token.. This question assesses knowledge of authentication factors, specifically identifying examples of 'something a user has' when granting system access. The correct choice illustrates a physical item possessed by the user for authentication.
Question
The BEST example of the concept of "something that a user has" when providing an authorized user access to a computing system is
Options
- Athe user's hand geometry.
- Ba credential stored in a token.
- Ca passphrase.
- Dthe user's face.
How the community answered
(22 responses)- A5% (1)
- B95% (21)
Why each option
This question assesses knowledge of authentication factors, specifically identifying examples of 'something a user has' when granting system access. The correct choice illustrates a physical item possessed by the user for authentication.
Hand geometry is a biometric characteristic, falling under the 'something you are' authentication factor, not 'something you have.'
A credential stored in a token, such as a smart card or a hardware security key (e.g., FIDO2 token), represents a physical item that the user possesses. This physical token is used to authenticate the user by proving possession of the device that securely holds or generates the necessary authentication information, thereby fulfilling the 'something you have' authentication factor.
A passphrase is a secret known only to the user, classifying it as a 'something you know' authentication factor, not 'something you have.'
A user's face is a biometric characteristic, which falls under the 'something you are' authentication factor, not 'something you have.'
Concept tested: Authentication factors ('something you have')
Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks#what-is-multifactor-authentication
Topics
Community Discussion
No community discussion yet for this question.