nerdexam
CompTIA

SY0-301 · Question #758

Which of the following BEST describes using a smart card and typing in a PIN to gain access to a system?

The correct answer is D. Multifactor authentication. Using a smart card combined with a PIN represents multifactor authentication because it combines two distinct authentication factors - something you have and something you know.

General security concepts

Question

Which of the following BEST describes using a smart card and typing in a PIN to gain access to a system?

Options

  • ABiometrics
  • BPKI
  • CSingle factor authentication
  • DMultifactor authentication

How the community answered

(40 responses)
  • B
    3% (1)
  • C
    3% (1)
  • D
    95% (38)

Why each option

Using a smart card combined with a PIN represents multifactor authentication because it combines two distinct authentication factors - something you have and something you know.

ABiometrics

Biometrics specifically refers to authentication using unique physical or behavioral characteristics such as fingerprints or retinal scans; a PIN and smart card combination does not involve any biometric measurement.

BPKI

PKI (Public Key Infrastructure) is a framework for managing digital certificates and key pairs used in encryption and digital signatures; while smart cards can store PKI certificates, describing this scenario as PKI does not capture the authentication method being used.

CSingle factor authentication

Single factor authentication uses only one authentication factor category; this scenario uses two separate factor categories (something you have and something you know), which by definition makes it multifactor.

DMultifactor authenticationCorrect

Multifactor authentication (MFA) requires a user to present credentials from two or more different factor categories: something you know (password/PIN), something you have (smart card/token), or something you are (biometric). A smart card is a possession factor and a PIN is a knowledge factor, satisfying the requirement for multiple distinct categories. This combination significantly increases security because an attacker would need to both steal the physical card and know the PIN.

Concept tested: Multifactor authentication factor categories

Source: https://pages.nist.gov/800-63-3/sp800-63b.html

Topics

#multifactor authentication#smart card#PIN#authentication factors

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice