Hotspot Question For each of the given items, select the appropriate authentication category from the dropdown choices. Instructions: When you have completed the simulation, please select the Done…

Question

Exhibits

Answer Area

• Retina scan
  Something you haveSomething you knowSomething you areAll given authentication categories
• Smart card
  Something you haveSomething you knowSomething you areAll given authentication categories
• Hardware Token
  Something you haveSomething you knowSomething you areAll given authentication categories
• Password
  Something you haveSomething you knowSomething you areAll given authentication categories
• PIN number
  Something you haveSomething you knowSomething you areAll given authentication categories
• Fingerprint scan
  Something you haveSomething you knowSomething you areAll given authentication categories

Explanation

This hotspot question tests knowledge of authentication factor categories: something you know, something you have, and something you are. Each authentication method must be correctly classified into one of these three (or sometimes four, including somewhere you are) categories.

Approach. Authentication factors are classified into distinct categories: 'Something you know' includes passwords, PINs, security questions, and passphrases - knowledge-based credentials. 'Something you have' includes smart cards, hardware tokens (like RSA SecurID), key fobs, CAC cards, and one-time password (OTP) devices - physical possession-based credentials. 'Something you are' includes biometrics such as fingerprints, retina scans, facial recognition, voice recognition, and iris scans - inherent physical characteristics. A fourth factor, 'Somewhere you are,' covers geolocation or GPS-based authentication. Assign each item to its correct category based on whether it relies on knowledge, physical possession, biological traits, or location.

Concept tested. Authentication factor categories (something you know, something you have, something you are, somewhere you are) as defined in CompTIA Security+ and general cybersecurity frameworks (NIST SP 800-63).

Reference. CompTIA Security+ SY0-701 Objective 4.6 – Explain the importance of using appropriate authentication and authorization controls; NIST SP 800-63 Digital Identity Guidelines

No community discussion yet for this question.