nerdexam
(ISC)2

SSCP · Question #1281

Authentication is based on which of the following:<br>(Choose three)

The correct answer is A. Something you are C. Something you know E. Something you have. Authentication methods verify identity based on three main factors: something the user knows (like a password), something the user has (like a smart card), or something the user is (like a fingerprint).

Submitted by katya_ua· Apr 18, 2026Access Controls

Question

Authentication is based on which of the following:<br>(Choose three)

Options

  • ASomething you are
  • BSomething you input
  • CSomething you know
  • DSomething you compute
  • ESomething you have

How the community answered

(59 responses)
  • A
    90% (53)
  • B
    3% (2)
  • D
    7% (4)

Why each option

Authentication methods verify identity based on three main factors: something the user knows (like a password), something the user has (like a smart card), or something the user is (like a fingerprint).

ASomething you areCorrect

"Something you are" refers to biometric factors like fingerprints, facial scans, or iris patterns.

BSomething you input

"Something you input" is too broad and can apply to all factors (inputting a password, inputting a token code, scanning a fingerprint). It's not a distinct category of authentication factor.

CSomething you knowCorrect

"Something you know" refers to knowledge factors such as passwords, PINs, or passphrases.

DSomething you compute

"Something you compute" is not a standard authentication factor category; while some authentication methods involve computations (e.g., challenge-response), it's not how the factors themselves are categorized.

ESomething you haveCorrect

"Something you have" refers to possession factors like smart cards, security tokens, or physical keys.

Concept tested: Authentication factors (knowledge, possession, inherence)

Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

Topics

#Authentication Factors#Multi-Factor Authentication#Security Principles#Identity Verification

Community Discussion

No community discussion yet for this question.

Full SSCP Practice