ISC2 CISSP (Certified Information Systems Security Professional)Identity and Access Management (IAM)Easy
A security team is evaluating methods to enhance the security of their remote access VPN. They want to implement a solution that requires users to provide something they uniquely possess, in addition to their password, to authenticate. Which authentication factor category does this 'something they possess' fall under?
- ASomething You Are
- BSomething You Have
- CSomewhere You Are
- DSomething You Know
Show answer & explanationAnswer & explanation
Correct answer: B. Something You Have
An item that a user uniquely possesses, such as a smart card, hardware token, or mobile phone (for OTPs), falls under the 'Something You Have' authentication factor category.
Why the other options are wrong
- A. 'Something You Are' refers to biometric data like fingerprints or retina scans.
- C. 'Somewhere You Are' refers to location-based authentication.
- D. 'Something You Know' refers to passwords, PINs, or secret questions.
Authentication Factor: Something You Have
A category of authentication factors that relies on a physical item or device that only the legitimate user possesses.
- Examples: Smart cards, USB tokens, mobile phones (for OTP apps).
- Used in multi-factor authentication.
- Adds a layer of security beyond passwords.
Memory trick: Know, Have, Are, Do, Where: The Five Factors