IPA IP 2023 Question 62
A question IPA Japan published in 令和5年度 ITパスポート試験 公開問題 問62, translated into English. ITPEC is based on the same exams.
Authentication factors in information security can be classified into three (3) types. Which of the following is the appropriate set of the three (3) types of authentication factors?
Explanation
Possession information, biometric information, knowledge information — the three factors that can prove a user is who they claim to be.
Multi-factor authentication combines two or more different factors, such as a card and a PIN, so that a stolen password alone is not enough.
Answer (d)
Why not others:
- •(a), (b) and (c) — each includes personal information. A name, address or date of birth is known to many people or easy to find, so it cannot prove identity; it is not an authentication factor
Key rule: The three authentication factors are what you know, what you have and what you are; two-factor authentication must use two different ones, not two passwords.
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.