Examkin

Question

Difficulty: MediumPassword Security Policies, MFA, and Certificates

An enterprise network security policy mandates Multi-Factor Authentication for administrative access to core switches. An administrator logs in by entering a static PIN followed by a one-time passcode generated by a physical hardware token. Which statement correctly categorizes the authentication factors used in this scenario?

  1. It combines a knowledge factor (the static PIN) with a possession factor (the physical hardware token).Answer
  2. B
    It relies entirely on two knowledge factors because both the static PIN and the generated passcode are numeric strings entered by the user.
  3. C
    It combines an inherent factor (biometric trait) with a possession factor (the hardware token).
  4. D
    It provides single-factor authentication because RADIUS and TACACS+ servers automatically consolidate PINs and passcodes into one credential payload.

Answer

The authentication mechanism combines a knowledge factor (static PIN) with a possession factor (hardware token).
The static PIN is a knowledge factor (something you know), and the hardware token is a possession factor (something you have). Using credentials from two distinct categories forms valid Multi-Factor Authentication (MFA).

Step-by-Step Solution

1
Identify the first credential component used during authentication.
The static PIN is memorized information, which falls under the 'something you know' (knowledge) factor.
Knowledge factors consist of secrets stored in human memory, such as passwords, passphrases, or PINs.
2
Identify the second credential component used during authentication.
The hardware token generates a time-based passcode, proving physical ownership of the device, which falls under the 'something you have' (possession) factor.
Possession factors require holding a physical or digital artifact, such as a hardware dongle, smart card, or registered mobile device.
3
Evaluate whether true multi-factor authentication (MFA) is achieved.
Combining two different factor types (knowledge + possession) satisfies true multi-factor authentication standards.
MFA requires credentials from at least two distinct factor categories (knowledge, possession, inherence).

Key Concept

Multi-Factor Authentication (MFA) Factor Classification
Rate this question

Topics

Password Security Policies, MFA, and Certificates

More questions from this topic