Examkin

Soru

Zorluk: OrtaPassword Security Policies, MFA, and Certificates

An enterprise network policy mandates Multi-Factor Authentication (MFA) for network administrators establishing SSH sessions to core infrastructure devices. The policy specifically requires combining a 'something you know' factor with a 'something you have' factor. Which authentication combination satisfies this policy requirement?

  1. A static passphrase and a one-time password (OTP) generated by a mobile authenticator appCevap
  2. B
    A complex account password and a secondary secret PIN entered during login
  3. C
    A physical USB hardware security key and a smartcard inserted into a badge reader
  4. D
    A fingerprint biometric scan accompanied by a retina pattern verification

Cevap

Combining a static passphrase with an OTP generated by a mobile authenticator app satisfies the requirement because it pair a knowledge factor ('something you know') with a possession factor ('something you have').
Multi-Factor Authentication requires using authentication mechanisms from at least two distinct categories: Knowledge (something you know), Possession (something you have), or Inherence (something you are). A static passphrase is a knowledge factor because it relies on memorized secret data, while a mobile authenticator app OTP represents a possession factor because it relies on control of a specific registered physical device.

Adım Adım Çözüm

1
Identify the MFA factor categories required by the security policy
The policy requires one knowledge factor ('something you know') and one possession factor ('something you have').
True MFA requires distinct factor categories to ensure that compromising one mechanism does not compromise the entire authentication process.
2
Categorize the candidate authentication methods presented in each option
A passphrase is knowledge; a mobile authenticator app tied to a physical device is possession. Passwords/PINs are dual knowledge. Hardware keys/smartcards are dual possession. Biometrics are dual inherence.
Classifying each mechanism into its respective MFA category reveals which pair spans two distinct requested categories.
3
Select the pair that combines a knowledge factor and a possession factor
The option combining a static passphrase with a mobile authenticator app OTP is correct.
It fulfills both required factor types.

Anahtar Kavram

Multi-Factor Authentication (MFA) Categorization (Knowledge, Possession, Inherence)
Bu soruyu puanla

Konular

Password Security Policies, MFA, and Certificates

Bu konudan daha fazla soru