200-301 Question 427
Select 2A company is implementing multifactor authentication (MFA) for its employees to enhance security. Which of the following methods, when combined, would provide a complete MFA solution?
- A
A hardware token that generates a one-time password (OTP)
- B
A password entered by the user
- C
A fingerprint scan
- D
A digital certificate installed on the user's device
- E
A username entered by the user
Show answer and explanation
Correct answers: A, C
Explanation
Multifactor authentication (MFA) requires at least two out of three types of factors: something you know (e.g., a password), something you have (e.g., a hardware token), and something you are (e.g., a fingerprint). Combining a hardware token (something you have) and a password (something you know) satisfies the requirements for a complete MFA solution.
- A. Correct.
A hardware token that generates an OTP is considered 'something you have,' which is one of the factors in MFA.
- B. Incorrect.
A password is 'something you know,' which is a valid factor in multifactor authentication.
- C. Correct.
A fingerprint scan is 'something you are,' which is a biometric factor and part of MFA.
- D. Incorrect.
A digital certificate is a security measure but is not part of the three traditional MFA factors (something you know, have, or are).
- E. Incorrect.
A username is an identifier, not an authentication factor, and does not contribute to MFA.