100-160 Question 96
Select 3An organization has implemented a secure access policy for remote workers. The security team has decided to use a multi-factor authentication (MFA) solution to strengthen access control. Which of the following factors should be combined to ensure secure access when employees log in remotely?
- A
Something the user knows, such as a password or PIN
- B
Something the user has, such as a hardware token or smartphone with an authentication app
- C
Something the user is, such as a fingerprint or facial recognition
- D
The geographic location of the user when logging in
- E
The user's job title within the organization
Show answer and explanation
Correct answers: A, B, C
Explanation
Multi-factor authentication (MFA) enhances secure access by requiring at least two different categories of authentication factors: something the user knows (e.g., a password), something the user has (e.g., a hardware token or mobile app), and something the user is (e.g., biometric data). Combining these factors ensures a higher level of security by making it significantly harder for an attacker to gain unauthorized access.
- A. Correct.
Correct: 'Something the user knows' (e.g., a password) is one of the three primary categories of authentication factors. It is commonly used in MFA solutions.
- B. Correct.
Correct: 'Something the user has' (e.g., a hardware token or smartphone) is another key category of authentication factors and is frequently used in MFA setups.
- C. Correct.
Correct: 'Something the user is' (e.g., biometric data like fingerprints) represents a third category of authentication factors and is often used in secure access technologies.
- D. Incorrect.
Incorrect: While geographic location can be used as part of access policies to restrict login attempts from certain areas, it is not considered one of the primary categories of MFA factors.
- E. Incorrect.
Incorrect: The user's job title is irrelevant to the authentication process and does not contribute to MFA security.