An organization is updating its infrastructure access control policies and mandates Multi-Factor Authentication (MFA) for administrative SSH connections to all core routers. Which combination of credentials satisfies true Multi-Factor Authentication by employing two distinct authentication factor categories?
- A static user password combined with a time-based one-time password (TOTP) generated by a physical keyfob tokenAnswer
- BA domain user account password combined with an enable secret passphrase and a security PIN
- CA fingerprint scan combined with a high-resolution retina scan
- DA mobile app push notification approval combined with an SMS verification code sent to the same smartphone
Answer
A static user password combined with a time-based one-time password (TOTP) generated by a physical keyfob token
Multi-Factor Authentication (MFA) requires using credentials from at least two distinct authentication categories: Knowledge (something you know, like a password), Possession (something you have, like a physical hardware token), and Inherence (something you are, like biometric scans). Pairing a standard password with a hardware-generated TOTP code combines a knowledge factor with a possession factor.
Step-by-Step Solution
Key Concept
Authentication Factor Categorization (Knowledge, Possession, Inherence)