Examkin

Question

Difficulty: EasyPassword Security Policies, MFA, and Certificates

An network administrator is implementing Multi-Factor Authentication (MFA) to secure access to network infrastructure devices. Which two of the following options represent a possession factor ('something you have')? (Select two.)

  1. A physical hardware security token that generates time-based one-time passcodes (TOTP)Answer
  2. An enterprise smart card inserted into a card reader for identity verificationAnswer
  3. C
    A complex 16-character alphanumeric password stored in the user's memory
  4. D
    A biometric fingerprint scan used to authorize administrative login
  5. E
    A personal identification number (PIN) entered on a keypad

Answer

The correct options are the physical hardware security token and the enterprise smart card.
Multi-Factor Authentication (MFA) requires distinct authentication factors. The physical hardware security token and the enterprise smart card both require the user to physically possess a tangible object ('something you have') to authenticate successfully.

Step-by-Step Solution

1
Identify the core authentication factor types in Multi-Factor Authentication (MFA)
MFA relies on three primary factor categories: Knowledge (something you know), Possession (something you have), and Inherence (something you are).
Categorizing each option under its proper factor type is required to isolate possession factors.
2
Evaluate each choice against the 'something you have' (possession) definition
Physical hardware tokens and smart cards are physical items owned or held by the user. Passwords and PINs are knowledge items (something you know), and biometric fingerprints are inherence items (something you are).
Selecting the items that require physical ownership correctly satisfies the question prompt.

Key Concept

Authentication Factor Classification in Multi-Factor Authentication (MFA)
Rate this question

Topics

Password Security Policies, MFA, and Certificates

More questions from this topic