ITPEC IP April 2021 Question 36
The authentication technology is classified into three (3) types, namely authentication based on one’s possession, authentication based on physical characteristics, and authentication based on one’s memory. Which of the following is an appropriate combination of the implementation examples (1) through (3) and their classifications?
Explanation
(1) possession, (2) memory, (3) physical characteristics — IC card, password and fingerprint are one example of each authentication factor.
- •(1) IC card: something the user has, so possession
- •(2) ID and password: something the user knows, so memory
- •(3) Fingerprint: something the user is, so physical characteristics
Answer (b)
Why not others:
- •(a) — swaps (2) and (3): a password is not a body trait, and a fingerprint is not memorised
- •(c) — swaps (1) and (2): an IC card is carried, not remembered, and a password is not an object possessed
- •(d) — shifts all three: an IC card as memory, a password as a physical characteristic, a fingerprint as possession
Key rule: Combining two different factors, such as an IC card with a PIN, is two-factor authentication; two passwords are still only one factor.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.