CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Cyber Security
Which of the following best describes 'two-factor authentication' as a cyber security control?
Two-factor authentication means verifying identity using two different categories of proof, for example a password the user knows and a one-time password delivered to a phone the user holds. Two passwords or two devices do not count, because the factors must come from different categories.
- AEntering the same password twice at login
- BUsing two different categories of proof, such as a password and a one-time password sent to a phoneCorrect
- CUsing two separate passwords of different lengths
- DLogging in from two different devices
Explanation
Two-factor authentication combines two different categories of evidence: something known, something held, or something inherent. A password plus a phone OTP fits this. Two passwords are both knowledge factors, so they do not qualify.
Did you get it right without looking?
One question tells you little. A timed set on Cyber Security shows your real accuracy, how long you take and where you lose marks.
More Cyber Security questions
- A company detects ransomware encrypting files on one finance-department server connected to the corporate network. The incident team must ac…
- Kaveri Retail Pvt Ltd, an Indian company, suffers a ransomware attack that encrypts its servers. Under the CERT-In Directions of April 2022,…
- A hacker in a foreign country, using a computer located outside India, gains unauthorised access to a server located in Hyderabad belonging …
- A forensic investigator must collect evidence from a running server suspected of a breach. Following the order of volatility, which item sho…
- In digital forensics, what is the purpose of maintaining a chain of custody document for a seized mobile phone?
- In the standard incident response lifecycle followed in cyber security practice, which phase comes immediately after 'Detection and Analysis…