GH-900 · Question #30
Which of the following two-factor authentication (2FA) methods can you use to secure a GitHub account? (Choose three.)
The correct answer is A. Authenticator app: You can use an authenticator app (like Google Authenticator or Authy) to C. GitHub mobile: The GitHub mobile app can also be used to receive 2FA codes, adding D. Security keys: Physical security keys (such as YubiKeys) can be used as a strong form of 2FA. GitHub supports three primary 2FA methods: (A) Authenticator apps like Google Authenticator or Authy generate time-based one-time passwords (TOTP) that you enter at login. (C) The GitHub Mobile app can approve authentication requests via push notification, serving as a 2FA…
Question
Which of the following two-factor authentication (2FA) methods can you use to secure a GitHub account? (Choose three.)
Options
- AAuthenticator app: You can use an authenticator app (like Google Authenticator or Authy) to
- BSecurity questions
- CGitHub mobile: The GitHub mobile app can also be used to receive 2FA codes, adding
- DSecurity keys: Physical security keys (such as YubiKeys) can be used as a strong form of 2FA,
- ESingle sign-on
How the community answered
(18 responses)- A94% (17)
- E6% (1)
Explanation
GitHub supports three primary 2FA methods: (A) Authenticator apps like Google Authenticator or Authy generate time-based one-time passwords (TOTP) that you enter at login. (C) The GitHub Mobile app can approve authentication requests via push notification, serving as a 2FA method. (D) Physical security keys (FIDO2/WebAuthn hardware tokens like YubiKeys) are a phishing-resistant form of 2FA. Security questions (B) are a knowledge-based recovery mechanism, not a 2FA method, and they have largely been deprecated due to security weaknesses. Single sign-on (E) is an authentication delegation protocol, not a 2FA method itself - SSO providers may use 2FA internally, but SSO alone is not a GitHub 2FA option.
Topics
Community Discussion
No community discussion yet for this question.