ITPEC IP April 2022 Question 35

No IDs or passwords to remember, and no keys or cards to carry — biometric authentication uses the person's own body or behaviour.

Authentication relies on something you know (a password), something you have (a key, card or token) or something you are. Biometrics is the third kind: a physical trait such as a fingerprint, finger vein, iris, retina or face, or a behavioural one such as a signature or voice. It cannot be forgotten or left at home.

Answer (b)

Why not others:

• •(a) — a larger margin accepts looser matches: fewer authorized persons are rejected (false rejection falls), but more unauthorized persons are accepted (false acceptance rises); the two move in opposite directions
• •(c) — biometrics is often combined with a password or token, for example a fingerprint plus a PIN, as multi-factor authentication
• •(d) — retina and finger-vein patterns hardly change over the years, which is why they are used; a face or voice changes more

Key rule: The matching threshold trades the false rejection rate against the false acceptance rate; tightening it lowers one and raises the other.

Security · AI-written, may contain errors