SY0-301 · Question #450
The security department has implemented a new laptop encryption product in the environment. The product requires one user name and password at the time of boot up and also another password after the…
The correct answer is D. Single factor authentication. Although two passwords are required, both are knowledge-based factors (something you know), so this setup still constitutes single-factor authentication - using two instances of the same factor type does not make it multifactor.
Question
The security department has implemented a new laptop encryption product in the environment. The product requires one user name and password at the time of boot up and also another password after the operating system has finished loading. This setup is using which of the following authentication types?
Options
- ATwo-factor authentication
- BSingle sign-on
- CMultifactor authentication
- DSingle factor authentication
How the community answered
(32 responses)- A3% (1)
- B9% (3)
- C6% (2)
- D81% (26)
Why each option
Although two passwords are required, both are knowledge-based factors (something you know), so this setup still constitutes single-factor authentication - using two instances of the same factor type does not make it multifactor.
Two-factor authentication requires two credentials from two different factor categories (e.g., a password plus a hardware token); using two passwords uses the same factor type twice and does not meet this definition.
Single sign-on (SSO) is a mechanism that allows one set of credentials to authenticate a user across multiple systems; it is unrelated to the number of separate login prompts described.
Multifactor authentication requires at least two different types of authentication factors (knowledge, possession, inherence); two sequential passwords are both knowledge factors and therefore do not constitute multifactor authentication.
Single-factor authentication means all credentials used belong to the same authentication category. Both the pre-boot password and the OS-level password are 'something you know' factors. Multifactor authentication requires credentials from at least two distinct categories such as something you know, something you have, and something you are - using two passwords satisfies only one category.
Concept tested: Single factor vs multifactor authentication distinction
Source: https://csrc.nist.gov/glossary/term/multi_factor_authentication
Topics
Community Discussion
No community discussion yet for this question.