Skip to content

ACCA Strategic Professional · Strategic Business Leader · IT systems security and control

Ostrava Retail Bank is introducing authentication for its online banking portal. Customers will enter a password and then a one-time code generated by a hardware token. Which statement correctly describes this arrangement?

It is two-factor authentication using something the user knows, the password, and something the user has, the hardware token. The strength comes from using different categories of factor, so compromising one alone does not give access.

  1. AIt is two-factor authentication combining something the user knows with something the user hasCorrect
  2. BIt is two-factor authentication combining two things the user knows
  3. CIt is biometric authentication because the token is unique to the user
  4. DIt is single sign-on because one code replaces the password

Explanation

A password is a knowledge factor and a hardware token is a possession factor, so two different factor categories are used. Two passwords would be the same factor. A token is not biometric, and the password is still required so it is not single sign-on.

Did you get it right without looking?

One question tells you little. A timed set on IT systems security and control shows your real accuracy, how long you take and where you lose marks.

Practise IT systems security and controlFree diagnostic mock

More IT systems security and control questions