Exam 350-701 topic 1 question 250 discussion

"Authentication credentials are called factors. There are three categories of factors: • Knowledge (something the user knows) --> authentication by knowledge would be a user providing a password, a personal identification number (PIN) code, or answering security questions. • Possession (something a user has) --> authentication by ownership or possession include the following: a one-time passcode, memory card, smartcard, and out-of-band communication. The most common of the four is the one-time passcode sent to a device in the user’s possession. • Inherence (something the user is)" --> authentication by characteristic authenticates the user based on some physical or behavioral characteristic, sometimes referred to as a biometric attribute. The most used physical or physiological characteristics are as follows: • Fingerprints • Face recognition • Retina and iris • Palm and hand geometry • Blood and vascular information • Voice recognition CCNP / CCIE SCOR official cert guide by Omar Santos

agree with A & D

A and D are correct. B is not correct, time is not a factor in MFA

I'll go for biometric and knowledge factor : Something you know - (Knowledge - password) Something you have - (No choices) Something you are - (Biometric - fingerprint scanning or facial recognition or voice biometry)

people please stop voting for answer A - how many times have you used 2FA that relies on biometric data?

B- is not a factor - we can have time based hashed function but it is not a factor - in this case it would be possession factor which is not listed

BD - should be the correct answer

Currently: "Duo Push is our most commonly-used second factor of authentication, thanks to its simplicity and reliability. Users just download the Duo Mobile app and are automatically prompted to confirm each login attempt " --> Questio: Push is knowledge-based or time-based or both? - I think both. https://duo.com/product/multi-factor-authentication-mfa/authentication-methods/tokens-and-passcodes 2019 DUO: "Passcodes. Passcodes are the most common form of 2FA, and usually consist of a short string of numbers sent to a smartphone. Passcodes definitely count as 2FA. Since they rely on phone lines, however — which can be compromised — they represent the least secure method. Passcodes aren’t a real hit with users, either: each code must be manually entered, which can be a nuisance" https://duo.com/blog/two-factor-authentication-the-basics

D is a given. This page mentions Time-based is currently widely used while biometric is still up and coming. https://www.cisco.com/c/en/us/products/security/what-is-multi-factor-authentication.html#~methods

A, B and D all are good according to Cisco. From Cisco Site: Knowledge Knowledge--usually a password--is the most commonly used tool in MFA solutions. However, despite their simplicity, passwords have become a security problem and slow down productivity. Inherent This category includes biometrics like fingerprint, face, and retina scans. And...... Location-based and time-based Authentication systems can use GPS coordinates, network parameters, and metadata for the network in use, and device recognition for MFA. Adaptive authentication combines these data points with historical or contextual user data. Cisco needs to get their stuff together...

Reference: https://www.cisco.com/c/en/us/products/security/what-is-multi-factor-authentication.html The two most popular authentication factors are knowledge and inherent (including biometrics like fingerprint, face, and retina scans. Biometrics is used commonly in mobile devices). A and D is correct

Its B and D. time factor , knowledge factor

I'd go with AD here, here's a reference where "Biometric Factor" is mentioned on a cisco documentation: https://www.cisco.com/c/en/us/products/security/what-is-multi-factor-authentication.html#~how-mfa-works. D is a no brainer in my mind, that's the most common, although not the most secure...

There not much here. A and D are the correct one. Do no complicate what is easy. :)

Agree with B and D

Ey people stop discuss it Its B and D. https://www.cisco.com/c/en/us/products/security/what-is-multi-factor-authentication.html

Something you are. Something you know. Correct, A and D.