100-150 Question 279
Single answerA company implements a secure remote access solution for its employees to access internal resources. They decide to use a method that requires users to verify their identity using a password, a smartphone app generating a one-time code, and a fingerprint scan. Which security concept does this scenario represent?
- A
Authentication
- B
Authorization
- C
Multifactor Authentication (MFA)
- D
Encryption
Show answer and explanation
Correct answer: C
Explanation
The scenario describes the use of multiple methods to verify a user's identity: a password (something the user knows), a smartphone app generating a one-time code (something the user has), and a fingerprint scan (something the user is). This is the definition of Multifactor Authentication (MFA), which enhances security by requiring more than one method of verification.
- A. Incorrect.
Authentication is the process of verifying the identity of a user, but it does not specifically refer to using multiple factors like in this scenario.
- B. Incorrect.
Authorization involves determining what resources a user has permission to access after their identity is verified, which is not directly relevant here.
- C. Correct.
Multifactor Authentication (MFA) requires users to provide multiple forms of verification, such as something they know (password), something they have (smartphone app), and something they are (fingerprint scan), which is exactly described in this scenario.
- D. Incorrect.
Encryption refers to the process of encoding data to protect its confidentiality, but it does not involve the verification of a user's identity.