Which access control method is an example of "who you are"? (Choose three.)

Question

Options

• AIris scan
• BFingerprint
• CVoice recognition
• DBadge with photo
• EEmployee ID number

• A
  76% (38)
• B
  6% (3)
• C
  4% (2)
• D
  12% (6)
• E
  2% (1)

Explanation

The question asks "choose three," so the correct answers are A, B, and C - not just A alone. All three are biometric identifiers, which fall under the "something you are" authentication factor because they measure unique physical or behavioral characteristics of the individual.

Why A, B, C are correct: An iris scan, fingerprint, and voice recognition all authenticate based on your biological traits - attributes that are inherent to your body and cannot be easily transferred or forgotten.

Why D is wrong: A badge with photo is "something you have." You carry it; it isn't part of you. It can be stolen or loaned.

Why E is wrong: An employee ID number is "something you know" - a piece of information you memorize, not a physical characteristic.

Memory tip: The three authentication factors map to a simple phrase - "Know, Have, Are."

• Know → passwords, PINs, ID numbers
• Have → badges, tokens, smart cards
• Are → any biometric (fingerprint, retina/iris, voice, face)

When you see "who you are," immediately think biometrics only. If it can be written down or handed to someone else, it's not "who you are."

No community discussion yet for this question.