An organization is updating its administrative access policy for Cisco enterprise network devices. To enforce multi-factor authentication (MFA) for secure SSH management access, network administrators configure AAA authentication to require both a static account password and a one-time passcode (OTP) generated by a physical hardware token fob. Which statement correctly classifies these two authentication controls under standard MFA factor categories?
- The static account password is a knowledge factor (something you know), while the hardware token passcode is a possession factor (something you have).Answer
- BThe static account password is a possession factor (something you have), while the hardware token passcode is an inherence factor (something you are).
- CBoth the static account password and the hardware token passcode are classified as knowledge factors (something you know) because both involve text entry into a terminal.
- DThe static account password is a knowledge factor (something you know), while the hardware token passcode is an inherence factor (something you are).
Answer
The static account password is a knowledge factor (something you know), while the hardware token passcode is a possession factor (something you have).
Multi-Factor Authentication (MFA) enhances security by combining two or more independent credential types: Knowledge (something you know, such as a password or PIN), Possession (something you have, such as a physical hardware token, smart card, or mobile authenticator app), and Inherence (something you are, such as a fingerprint or iris scan). A static password is memorized information (knowledge), whereas a hardware token passcode requires physical ownership of the generating device (possession).
Step-by-Step Solution
Key Concept
Multi-Factor Authentication (MFA) Factor Categorization