Questão 41 — CompTIA SY0-701 CompTIA Security+ Certification Exam
An organization is designing its identity and access management (IAM) system and is evaluating authentication mechanisms for its cloud infrastructure. The security team wants to reduce reliance on passwords while maintaining strong authentication. They are considering implementing multi-factor authentication (MFA) using a combination of something the user knows and something the user has. Which of the following BEST aligns with this security objective?
- A. Implementing a password-only authentication system with complex password requirements.
- B. Requiring username and password alongside a hardware security key or mobile app-based authenticator.
- C. Using single sign-on (SSO) to allow users to log in once and access all resources without additional authentication.
- D. Allowing users to choose between password authentication or biometric authentication based on personal preference.
Resposta correta:
B
Explicação
Explanation: Correct answer: B. Requiring username and password alongside a hardware security key or mobile app-based authenticator. Multi-factor authentication requires at least two distinct factors from different categories: something you know (password/PIN), something you have (security key, smart card, or authenticator app), something you are (biometric), or somewhere you are (location). The scenario specifies combining 'something you know' and 'something you have,' which is precisely what option B provides - a password plus a hardware security key or mobile authenticator. Option A relies solely on passwords, undermining the objective. Option C uses single sign-on but doesn't necessarily add a second factor. Option D offers a choice between factors rather than requiring multiple factors together, which is weaker security than true MFA.
Quer todas as 907 questões por R$ 1,00?