Exam CCSP topic 1 question 349 discussion

Actual exam question from ISC's CCSP

Question #: 349
Topic #: 1

[All CCSP Questions]

Which of the following could be used as a second component of multifactor authentication if a user has an RSA token?

A. Access card
B. USB thumb drive
C. Retina scan
D. RFID

Show Suggested Answer

Suggested Answer: C 🗳️

by kjjcraigskel at Oct. 8, 2020, 4:01 p.m.

Comments

Submit Cancel

MaciekMT

1 month, 3 weeks ago

Selected Answer: C

Multifactor authentication (MFA) requires two or more factors from different categories: Something You Have → RSA token, smart card, security key Something You Know → Password, PIN Something You Are → Biometrics (fingerprint, retina scan, facial recognition) Since an RSA token falls under "Something You Have", the second component must come from a different category. A retina scan is "Something You Are", making it a valid second factor. Why Not the Others? A. Access card → Also "Something You Have," which does not meet MFA’s requirement for a different factor. B. USB thumb drive → Considered "Something You Have," similar to an RSA token. D. RFID → Usually associated with an access card, which is still "Something You Have."

upvoted 1 times

...

akg001

4 months, 4 weeks ago

Selected Answer: C

C. Retina scan

upvoted 3 times

...

kjjcraigskel

2 years ago

I would argue that stealing two things I have might be harder than stealing something I have and something I know...

upvoted 2 times

Zeezee2

11 months ago

The RSA token is something you have, a retinal scan means something you ARE not something you KNOW... Answer is 100% correct unless you can tell me how you yourself 'KNOW' your own eye?