100-160 Question 35
Select 3An organization uses a RADIUS server to manage network access for its employees. The security team has decided to implement multifactor authentication (MFA) to enhance security. Which of the following factors should be combined to provide effective MFA for network access?
- A
A password entered by the user
- B
A one-time passcode sent to the user's mobile device
- C
The user's IP address used during login
- D
A fingerprint scan from the user
- E
The username of the user
Show answer and explanation
Correct answers: A, B, D
Explanation
Multifactor authentication (MFA) requires combining two or more factors from different categories: something the user knows (e.g., a password), something the user has (e.g., a one-time passcode), and something the user is (e.g., biometrics such as a fingerprint). In this scenario, combining a password, a one-time passcode sent to the user's mobile device, and a fingerprint scan provides effective MFA. The IP address and username do not qualify as valid factors for MFA.
- A. Correct.
A password is something the user knows and is a valid authentication factor for MFA.
- B. Correct.
A one-time passcode is something the user has (e.g., a mobile device) and is a valid factor for MFA.
- C. Incorrect.
The IP address is not considered a valid authentication factor because it is network-related, not user-specific.
- D. Correct.
A fingerprint scan is something the user is (biometrics) and is a valid authentication factor for MFA.
- E. Incorrect.
A username is used for identification, not authentication, and does not qualify as an MFA factor.