nerdexam
CompTIA

SY0-501 · Question #209

Which of the following would meet the requirements for multifactor authentication?

The correct answer is B. Fingerprint and password. Multifactor authentication (MFA) requires at least two distinct authentication factors from different categories to verify a user's identity. The combination of a fingerprint and a password meets this requirement by utilizing a biometric and a knowledge factor.

Submitted by asante_acc· Mar 4, 2026General security concepts

Question

Which of the following would meet the requirements for multifactor authentication?

Options

  • AUsername, PIN, and employee ID number
  • BFingerprint and password
  • CSmart card and hardware token
  • DVoice recognition and retina scan

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    85% (23)
  • C
    4% (1)
  • D
    7% (2)

Why each option

Multifactor authentication (MFA) requires at least two distinct authentication factors from different categories to verify a user's identity. The combination of a fingerprint and a password meets this requirement by utilizing a biometric and a knowledge factor.

AUsername, PIN, and employee ID number

This combination only utilizes factors from the 'something you know' category (PIN and employee ID), failing to incorporate at least two different factor types required for true multifactor authentication.

BFingerprint and passwordCorrect

This option combines a biometric factor ('something you are' - fingerprint) with a knowledge factor ('something you know' - password). By using distinct types of authentication factors, it successfully satisfies the requirements for multifactor authentication.

CSmart card and hardware token

Both a smart card and a hardware token fall under the 'something you have' authentication factor, thus not providing two distinct types of factors for multifactor authentication.

DVoice recognition and retina scan

Both voice recognition and retina scan are biometric factors, falling under the 'something you are' category, which means this combination does not provide distinct authentication factor types.

Concept tested: Multifactor authentication (MFA) factor categories

Source: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-howitworks

Topics

#multifactor authentication#biometrics#authentication factors#something you are

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice