Two-factor authentication (2FA) enhances security by requiring two different authentication factors from the following categories:
Something you know (e.g., password, PIN)
Something you have (e.g., smart card, key fob)
Something you are (e.g., fingerprint, facial recognition)
The combination of a fingerprint (biometric authentication) and a PIN (knowledge-based authentication) satisfies two-factor authentication requirements.
A. The user's facial geometry and voice recognition – Incorrect. Both are biometric factors (something you are), meaning this is single-factor authentication.
B. The user's password and a separate passphrase – Incorrect. Both are knowledge-based factors (something you know), making this single-factor authentication.
C. The user's key fob and a smart card – Incorrect. Both are possession-based factors (something you have), meaning this is not true two-factor authentication.
D. The user's fingerprint and a personal identification number (PIN) (Correct Answer) – This combines biometric authentication (fingerprint) with knowledge-based authentication (PIN), fulfilling two-factor authentication.
IIA GTAG 15 – Information Security Governance emphasizes multi-factor authentication as a key security control.
NIST SP 800-63B – Digital Identity Guidelines defines two-factor authentication as requiring two distinct categories of authentication.
COBIT 2019 – DSS05 (Managed Security Services) highlights 2FA as a best practice for access control.
Explanation of Each Option:IIA References:
