SK0-004 · Question #85
An administrator decides to implement access control techniques to secure a datacenter. Which of the following would be the STRONGEST technique for the administrator to use?
The correct answer is A. Multifactor authentication. Multifactor authentication is the strongest access control technique because it requires two or more independent verification factors, making unauthorized access far more difficult than any single-factor control.
Question
An administrator decides to implement access control techniques to secure a datacenter. Which of the following would be the STRONGEST technique for the administrator to use?
Options
- AMultifactor authentication
- BRFID chip
- CCipher locks
- DBollards
How the community answered
(53 responses)- A92% (49)
- B2% (1)
- C2% (1)
- D4% (2)
Why each option
Multifactor authentication is the strongest access control technique because it requires two or more independent verification factors, making unauthorized access far more difficult than any single-factor control.
Multifactor authentication combines two or more independent factors - something you know, something you have, and/or something you are - so compromising a single factor is not sufficient to gain access. This layered approach addresses the weaknesses of any single credential type and is recognized by NIST and industry standards as the strongest authentication mechanism. Unlike physical controls alone, MFA actively validates the identity of the person attempting access.
An RFID chip is a single-factor physical token that can be cloned, lost, or stolen, providing weaker protection than a multi-factor approach.
Cipher locks rely on a single PIN or combination code, which represents only one factor and can be observed, shared, or guessed.
Bollards are vehicle barriers designed to prevent ram-raid physical intrusions and do not authenticate or control individual personnel access.
Concept tested: Multifactor authentication as strongest access control
Source: https://csrc.nist.gov/publications/detail/sp/800-63b/final
Topics
Community Discussion
No community discussion yet for this question.