ITPEC IP April 2023 Question 43
Topic: SecurityAlso asked in April 2019 and November 2021
Among the types of authentication I through IV, which of the following is a list that contains all and only biometrics authentication?
IPIN (Personal Identification Number)IIIrisIIIFingerprintIVVein
Explanation
II, III and IV: iris, fingerprint and vein — biometric authentication identifies a person by a physical or behavioural characteristic of the body.
- •I PIN — something the user knows; anyone who learns it can use it, so it is knowledge, not a biometric
- •II Iris, III Fingerprint and IV Vein — patterns of the body itself (the eye, the skin of a finger, the blood vessels of a finger or palm), each read by a sensor
Answer (c)
Why not others:
- •(a) I, II, III — includes the PIN, which is knowledge, and leaves out vein authentication
- •(b) II, III — leaves out vein authentication, a common biometric at ATMs and entry gates
- •(d) IV — keeps only vein and leaves out iris and fingerprint
Key rule: Authentication factors are something you know (password, PIN), something you have (IC card, token) and something you are (biometrics); combining two different kinds is multi-factor authentication.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.