A systems administrator is implementing multifactor authentication (MFA) on a critical production server to comply with a new security policy. The policy mandates the use of at least two factors from different categories. The administrator is reviewing authentication methods to identify one that satisfies the "something you know" requirement. Which of the following options fulfills this requirement?
The correct answer is a Personal Identification Number (PIN). Multifactor authentication (MFA) enhances security by requiring two or more authentication factors from different categories. The three main categories are "something you know" (knowledge), "something you have" (possession), and "something you are" (inherence). A PIN is a knowledge factor because it is a secret that the user must remember. A fingerprint scan is an inherence factor ("something you are"). A hardware security token and an RFID access card are both possession factors ("something you have") because they are physical objects a user must possess.