Which of the following authentication configurations qualifies as true multi-factor authentication (MFA) because it uses two different factor categories (knowledge, possession, inherence)?
MFA requires at least two different factor categories. A password is a knowledge factor. A hardware token (such as a security key or one-time-password fob) is a possession factor. Combining them satisfies the requirement for MFA.
The other choices either use only one factor category (password and PIN are both knowledge; fingerprint and facial recognition are both inherence) or provide only a single authentication step (username and password alone).
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is two-factor authentication (2FA)?
Open an interactive chat with Bash
Why is using only a username and password considered weak security?