ISC2 Certified in Cybersecurity (CC)Access Controls ConceptsMedium
A company requires employees to log into their work accounts using a password and a fingerprint scan. Which of the following best describes the authentication method being used?
- AMulti-factor authentication (MFA)
- BTwo-step verification
- CBiometric authentication
- DSingle-factor authentication
Show answer & explanationAnswer & explanation
Correct answer: A. Multi-factor authentication (MFA)
Multi-factor authentication (MFA) requires a user to provide two or more distinct authentication factors from different categories to verify their identity. A password ('something you know') and a fingerprint scan ('something you are') represent two different factors, thus qualifying as MFA.
Why the other options are wrong
- B. Two-step verification is often used interchangeably with MFA, but MFA specifically implies different *factors*, not just two *steps* which could be two passwords.
- C. Biometric authentication is one *type* of factor ('something you are'), not the combination of factors.
- D. Single-factor authentication uses only one type of credential (e.g., just a password).
Multi-Factor Authentication (MFA)
An authentication method that requires a user to provide two or more verification factors to gain access to a resource.
- Combines at least two distinct factors (e.g., knowledge, possession, inherence).
- Significantly enhances security over single-factor authentication.
- Commonly used to protect sensitive accounts.
Memory trick: More factors, more secure.