200-301 Question 426
Select 2A network administrator is tasked with securing access to a company's internal systems. The administrator is considering alternatives to traditional passwords to improve security. Which of the following methods would utilize multifactor authentication?
- A
Requiring a user to input a password and a one-time code sent to their phone
- B
Using a digital certificate stored on a smart card to authenticate users
- C
Implementing a fingerprint scan alongside a password for user login
- D
Authenticating users solely based on their IP address
- E
Allowing users to log in with a username and password only
Show answer and explanation
Correct answers: A, C
Explanation
Multifactor authentication (MFA) enhances security by requiring users to provide multiple factors from different categories: something you know (e.g., password), something you have (e.g., a phone or token), and something you are (e.g., biometrics). Combining at least two of these factors is necessary to classify a method as MFA.
- A. Correct.
This is an example of multifactor authentication because it combines something the user knows (password) with something the user has (one-time code sent to their phone).
- B. Incorrect.
Using a digital certificate alone is not multifactor authentication because it does not combine multiple factors such as knowledge, possession, or biometric.
- C. Correct.
This is a valid example of multifactor authentication because it combines something the user knows (password) with something the user is (fingerprint).
- D. Incorrect.
IP address-based authentication is not considered multifactor authentication because it does not involve multiple factors like knowledge, possession, or biometric.
- E. Incorrect.
Username and password alone rely on a single factor (knowledge) and do not qualify as multifactor authentication.