220-1102 Question 328
Single answerRetina scannerA healthcare clinic is replacing badge-only access at its records room with a stronger authentication method. The manager wants a control that verifies a unique physical characteristic of each employee and is difficult to share or duplicate. Which option best meets this requirement?
- A
Implement a retina scanner at the records room entrance
- B
Require employees to enter a longer password at the door keypad
- C
Issue smart cards to all employees for room access
- D
Deploy a proximity badge reader with shorter auto-lock timeouts
Show answer and explanation
Correct answer: A
Explanation
The best answer is the retina scanner because the scenario specifically calls for authentication based on a unique physical characteristic that is difficult to share or duplicate. In CompTIA A+ Core 2, retina scanners fall under biometric authentication methods, which are categorized as 'something you are.' Compared with passwords, smart cards, and proximity badges, biometric controls better support non-transferable identity verification at the point of access. In real-world security practice, organizations often use biometrics for sensitive areas where accountability and resistance to credential sharing are important. While other options can still be useful security controls, they do not meet the stated requirement as directly or effectively as a retina scanner.
- A. Correct.
Correct. A retina scanner is a biometric authentication device that identifies users based on the unique blood vessel pattern in the retina. This is a strong 'something you are' factor and is much harder to share than a password, badge, or card. In a high-security area such as a healthcare records room, this directly addresses the manager's goal of using a unique physical characteristic that is difficult to duplicate.
- B. Incorrect.
Incorrect. A longer password can improve security, but it is still a knowledge factor ('something you know'). Passwords can be shared, observed, written down, or reused. This does not meet the requirement for verifying a unique physical characteristic.
- C. Incorrect.
Incorrect. Smart cards are a possession factor ('something you have'). They can provide strong authentication when combined with another factor, but by themselves they can be lost, stolen, or loaned to another person. This does not satisfy the requirement for a biometric characteristic.
- D. Incorrect.
Incorrect. A proximity badge reader is also a possession-based control. Reducing auto-lock timeouts may improve physical security after entry, but it does not change the fact that the access method itself relies on something a user carries and could share or lose.