Section 17.158 Multi-factor Authentication

Question 1

Multi-factor Authentication (MFA)

Answer 1

A security system requiring multiple/combined methods of authentication from independent categories of credentials

■ Enhances security by creating a layered defense against unauthorised access

Question 2

Five Categories of Authentication for MFA

Something You Know (Knowledge-Based Factor)

Answer 2

Authentication based on information the user knows, like a password, PIN, or answers to secret questions

Knowledge-based factors like passwords and PINs are the most common authentication methods

e.g unlocking iphone with 6 digit pin

Question 3

Five Categories of Authentication for MFA

Something You Have (Possession-Based Factor)

Answer 3

Authentication based on physical possession of an item

○ Smart card (unlock laptop before use with card and pin)
○ Hardware token (key fob)
○ Software token on a device

Question 4

Five Categories of Authentication for MFA

Something You Are (Inherence-Based Factor)

Answer 4

Authentication based on biometric characteristics unique to individuals

○ Fingerprints
○ Facial recognition (face id)
○ Voice recognition

Question 5

Five Categories of Authentication for MFA

Somewhere You Are (Location-Based Factor)

Answer 5

Authentication based on the user’s location, determined through IP address, GPS, or network connection

● Geographical location restrictions can be applied

Question 6

Five Categories of Authentication for MFA

Something You Do (Behavior-Based Factor)

Answer 6

Authentication based on recognising unique patterns associated with user behavior

○ Keystroke patterns
○ Device interaction

Question 7

Authentication Types

Single Factor Authentication

Answer 7

Uses one authentication factor to access a user account

e.g Username and Password (Both knowledge base factors)

Question 8

Authentication Types

Two Factor Authentication (2FA)

Answer 8

Requires two different authentication factors to gain access

e.g Username and Password then a text message to your samrt phone: Knowledge and Possesion Factors

Question 9

Authentication Types

Multi-factor Authentication (MFA)

Answer 9

Uses two or more factors to authenticate a user. MFA can involve 2, 3, 4, or 5 factors depending on the chosen
configuration

Generally, using more authentication types makes a system safer, but is less convenient for the end user

Question 10

Password managers

Answer 10

Password managers can generate different long, strong, and complex passwords for each website or application

Question 11

Passkeys (Passwordless Authentication)

Answer 11

An alternative to traditional passwords for authentication Involves creating a passkey secured by device authentication methods like fingerprint or facial recognition

● Provides a more secure and user-friendly authentication method

● Passkeys utilise public key cryptography