In order to improve the security of a company, an information security officer decided to implement multifactor authentication (MFA) technology. The company currently requires badges to access its…

The correct answer is C. What you know. Badges represent the 'what you have' authentication factor - a physical token the user possesses. MFA requires at least two distinct factor categories. The remaining logical choices are 'what you know' (a PIN, password, or code) and 'who you are' (biometrics). For a physical…

Vulnerability discovery and analysis

Question

In order to improve the security of a company, an information security officer decided to implement multifactor authentication (MFA) technology. The company currently requires badges to access its facilities. Which of the following additional types of physical controls should the security officer recommend to enforce MFA?

Options

AWhat you have
BWhere you are
CWhat you know
DWho you are

How the community answered

(53 responses)

A
2% (1)
B
4% (2)
C
85% (45)
D
9% (5)

Explanation

Badges represent the 'what you have' authentication factor - a physical token the user possesses. MFA requires at least two distinct factor categories. The remaining logical choices are 'what you know' (a PIN, password, or code) and 'who you are' (biometrics). For a physical access control scenario, adding a PIN pad to complement the badge reader is the most common and practical pairing - the user must both have the badge and know the PIN. 'Who you are' (biometrics) is also valid MFA, but the question asks which factor type to add, and 'what you know' (option C) is the standard complement to a badge in physical security implementations.

Topics

#Multifactor Authentication (MFA)#Authentication Factors#Physical Access Control#Security Controls

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice