Examkin

Question

Difficulty: EasyPassword Security Policies, MFA, and Certificates

A network administrator configures Multi-Factor Authentication (MFA) for engineers establishing SSH connections to core routers. The login policy requires engineers to enter their domain password followed by a dynamic time-based passcode generated by a mobile application on their corporate-managed phone. Which two authentication factor categories are being used in this scenario?

  1. Something you know and something you haveAnswer
  2. B
    Something you know and something you are
  3. C
    Something you have and somewhere you are
  4. D
    Something you know and somewhere you are

Answer

Something you know and something you have
Multi-Factor Authentication requires combining factors from at least two different categories. A password is a knowledge factor ('something you know'), and a mobile phone generating single-use passcodes serves as a possession factor ('something you have').

Step-by-Step Solution

1
Identify the first authentication element required by the policy.
The domain password is information memorized by the user.
Secrets or information memorized by a user fall under the 'something you know' (knowledge) factor.
2
Identify the second authentication element required by the policy.
The dynamic passcode generated on the corporate mobile phone requires physical access to that specific registered device.
Physical devices or software tokens tied to a device fall under the 'something you have' (possession) factor.
3
Combine the identified factors to determine the overall MFA combination.
The combination consists of 'something you know' and 'something you have'.
Using two factors from distinct categories satisfies Multi-Factor Authentication requirements.

Key Concept

Multi-Factor Authentication (MFA) Factor Categorization
Rate this question

Topics

Password Security Policies, MFA, and Certificates

More questions from this topic