An organization plans to implement multifactor authentication techniques within the enterprise network architecture. Each authentication factor is expected to be a unique control. Which of the…

Option A combines three distinct factor categories: a proximity card (something you have), a fingerprint scanner (something you are/biometric), and a PIN (something you know). This satisfies the requirement that each authentication factor be a unique control drawn from a different category, making it a proper implementation of multifactor authentication.

Option B uses a fingerprint scanner and voice recognition, which are both biometric factors (something you are), meaning two of the three controls belong to the same category and are not unique factor types.

Option C uses a smart card, a user PKI certificate, and a privileged user certificate, all of which fall under the same category (something you have/possession-based credentials), providing no diversity across authentication factor types.

Option D uses voice recognition (something you are), a smart card (something you have), and a proximity card (something you have), repeating the possession factor category and therefore not employing three unique authentication controls.