nerdexam
(ISC)2

SSCP · Question #193

Pin, Password, Passphrases, Tokens, smart cards, and biometric devices are all items that can be used for Authentication. When one of these item listed above in conjunction with a second factor to…

The correct answer is B. Two-factor authentication. Two-factor authentication (2FA) is correct because it specifically describes the practice of combining something you know (PIN, password, passphrase), something you have (token, smart card), or something you are (biometric) with a second, independent factor - requiring both to…

Submitted by zhang_li· Apr 18, 2026Access Controls

Question

Pin, Password, Passphrases, Tokens, smart cards, and biometric devices are all items that can be used for Authentication. When one of these item listed above in conjunction with a second factor to validate authentication, it provides robust authentication of the individual by practicing which of the following?

Options

  • AMulti-party authentication
  • BTwo-factor authentication
  • CMandatory authentication
  • DDiscretionary authentication

How the community answered

(22 responses)
  • B
    95% (21)
  • C
    5% (1)

Explanation

Two-factor authentication (2FA) is correct because it specifically describes the practice of combining something you know (PIN, password, passphrase), something you have (token, smart card), or something you are (biometric) with a second, independent factor - requiring both to succeed before granting access, which significantly hardens authentication against compromise.

Multi-party authentication (A) is incorrect - this refers to requiring multiple people to authenticate together (e.g., two officers launching a missile), not a single user presenting two credentials. Mandatory authentication (C) is not a standard authentication classification; it's a distractor borrowing language from "Mandatory Access Control" (MAC), which governs authorization, not authentication. Discretionary authentication (D) is similarly fabricated - it conflates terminology from "Discretionary Access Control" (DAC) and has no meaning in authentication frameworks.

Memory tip: Think "2FA = 2 factors from different categories" - knowing your PIN alone is 1-factor; pairing it with your fingerprint crosses into a second category, making it true two-factor authentication. The word "two" in the answer is your signal.

Topics

#Authentication#Two-factor authentication (2FA)#Multi-factor authentication (MFA)#Authentication factors

Community Discussion

No community discussion yet for this question.

Full SSCP Practice