A company is designing an MFA system for a high-security environment. They want to use three factors. They have selected a smart card (possession) and a fingerprint (inherence). Which of the following would be the most appropriate third factor?

A second fingerprint from a different finger

A small law firm wants to strengthen access to its case-management system. The IT manager proposes requiring users to enter a password and then a one-time code from an authenticator app on their personal smartphones. Several attorneys object, saying the smartphone is not company-issued and could be lost or compromised. Which adjustment best addresses the attorneys' concern while still achieving multi-factor authentication?

Keep the password and add a second password that only the attorney knows

Use only a fingerprint scanner on the attorney's personal laptop

Require a hardware security key (FIDO2) in addition to the password, and remove the smartphone from the process

Replace the authenticator app with SMS one-time codes sent to the same smartphone

A bank is deploying a new authentication system for online banking. They want to use MFA. Which of the following combinations uses three different authentication factors?

Password, smart card, and fingerprint

Smart card, TOTP token, and mobile phone

Password, PIN, and security question

Fingerprint, iris scan, and voice recognition

EC-CouncilCertified Cybersecurity Technician

Domain 2Objective 1

Identification, Authentication, and Authorization CCT Practice Questions (Page 4)

Part of the Identity and Network Security Controls domain, which makes up ~20% of our current practice bank.

48questions here

10free pages

8concepts

Questions 16–20

16expert · medium
A company is designing an MFA system for a high-security environment. They want to use three factors. They have selected a smart card (possession) and a fingerprint (inherence). Which of the following would be the most appropriate third factor?
Select an answer first
17foundation · easy
Which of the following is an example of the 'something you have' authentication factor?
Select an answer first
18application · medium
A small law firm wants to strengthen access to its case-management system. The IT manager proposes requiring users to enter a password and then a one-time code from an authenticator app on their personal smartphones. Several attorneys object, saying the smartphone is not company-issued and could be lost or compromised. Which adjustment best addresses the attorneys' concern while still achieving multi-factor authentication?
Select an answer first
19foundation · easy
Which access control model uses labels and clearances to enforce a central security policy?
Select an answer first
20application · easy
A bank is deploying a new authentication system for online banking. They want to use MFA. Which of the following combinations uses three different authentication factors?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Identification, Authentication, and Authorization CCT Practice Questions (Page 4)

Questions 16–20

A company is designing an MFA system for a high-security environment. They want to use three factors. They have selected a smart card (possession) and a fingerprint (inherence). Which of the following would be the most appropriate third factor?

Which of the following is an example of the 'something you have' authentication factor?

Which access control model uses labels and clearances to enforce a central security policy?

A bank is deploying a new authentication system for online banking. They want to use MFA. Which of the following combinations uses three different authentication factors?

Keep studying — Identity and Network Security Controls