nerdexam
(ISC)2

SSCP · Question #1207

Your ATM card is a form of two-factor authentication for what reason?

The correct answer is B. It combines something you have with something you know. An ATM card combined with a Personal Identification Number (PIN) serves as two-factor authentication because it requires both a physical item you possess and knowledge you hold.

Submitted by amina.ke· Apr 18, 2026Access Controls

Question

Your ATM card is a form of two-factor authentication for what reason?

Options

  • AIt combines something you are with something you know
  • BIt combines something you have with something you know
  • CIt combines something you control with something you know
  • DIt combines something you are with something you have

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    91% (32)
  • D
    3% (1)

Why each option

An ATM card combined with a Personal Identification Number (PIN) serves as two-factor authentication because it requires both a physical item you possess and knowledge you hold.

AIt combines something you are with something you know

'Something you are' refers to biometrics (e.g., fingerprint, facial scan), which is not typically associated with a standard ATM card and PIN.

BIt combines something you have with something you knowCorrect

Two-factor authentication (2FA) enhances security by requiring two distinct factors for verification. An ATM card is 'something you have' (possession factor), and the Personal Identification Number (PIN) is 'something you know' (knowledge factor), thus fulfilling the criteria for 2FA.

CIt combines something you control with something you know

'Something you control' is not a standard, distinct authentication factor category, although 'something you have' implies control.

DIt combines something you are with something you have

This combination would be biometrics and possession, neither of which fully describes the ATM card and PIN scenario.

Concept tested: Two-factor authentication (2FA) factors

Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

Topics

#Two-factor authentication#Authentication factors#Something you have#Something you know

Community Discussion

No community discussion yet for this question.

Full SSCP Practice