SY0-501 · Question #327
An organization requires users to provide their fingerprints to access an application. To improve security, the application developers intend to implement multifactor authentication. Which of the…
The correct answer is B. Have users sign their name naturally. To implement robust multifactor authentication (MFA) and improve security beyond existing fingerprint authentication, a distinct type of authentication factor should be introduced.
Question
An organization requires users to provide their fingerprints to access an application. To improve security, the application developers intend to implement multifactor authentication. Which of the following should be implemented?
Options
- AUse a camera for facial recognition
- BHave users sign their name naturally
- CRequire a palm geometry scan
- DImplement iris recognition
How the community answered
(36 responses)- A14% (5)
- B72% (26)
- C8% (3)
- D6% (2)
Why each option
To implement robust multifactor authentication (MFA) and improve security beyond existing fingerprint authentication, a distinct type of authentication factor should be introduced.
Facial recognition is a physical biometric, falling under "something you are," and thus does not introduce a distinct factor type when combined with fingerprints for MFA.
Natural signature recognition is a behavioral biometric, categorized as "something you do," offering a distinct authentication factor compared to a physical biometric like a fingerprint, which is "something you are." Combining these two different types of biometrics provides greater factor diversity for multifactor authentication, enhancing security more effectively than adding another physical biometric.
A palm geometry scan is a physical biometric, also under "something you are," and would not provide a different authentication factor type alongside fingerprints.
Iris recognition is a physical biometric, similar to fingerprints as "something you are," and therefore does not add factor diversity for multifactor authentication.
Concept tested: Multifactor authentication factor types; Behavioral vs. physical biometrics
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63B.pdf
Topics
Community Discussion
No community discussion yet for this question.