Authentication factors (something you know, have, are) in Cybersecurity - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Authentication Factors

Which of the following is an example of the authentication factor "something you have"?

A A security token device

B A fingerprint scan

C A password you remember

D Your date of birth

💡 Hint

Think about physical objects that prove your identity.

"Something you have" refers to a physical item you possess, like a security token device. Passwords and dates of birth are "something you know," and fingerprints are "something you are."

📋 Factual

intermediate

Biometric Authentication Factor

Which authentication factor category does a retina scan belong to?

A Something you are

B Something you have

C Something you know

D Something you do

💡 Hint

Consider what a retina scan measures about a person.

A retina scan measures a unique physical characteristic, so it is "something you are."

🚀 Application

advanced

Multi-Factor Authentication Scenario

Which combination correctly represents a two-factor authentication system?

Choose the option that pairs two different authentication factors.

A Security question and password

B Fingerprint and retina scan

C Password and PIN code

D Password and hardware token

💡 Hint

Two-factor authentication requires two different types of factors.

Two-factor authentication combines two different categories, such as "something you know" (password) and "something you have" (hardware token). Options C and D use only "something you know," and B uses two "something you are" factors.

🔍 Analysis

advanced

Evaluating Authentication Factor Strength

Which authentication factor is generally considered the most secure against impersonation attacks?

A A memorable PIN

B A security question answer

C A hardware security key

D A complex password

💡 Hint

Think about what is hardest for an attacker to copy or steal.

Hardware security keys are physical devices that are difficult to duplicate or steal remotely, making them more secure than passwords or PINs, which can be guessed or phished.

❓ Reasoning

expert

Identifying Authentication Factor Errors

Consider this statement: "Using a voice recognition system as the only authentication factor is an example of multi-factor authentication." What is the issue with this statement?

A Voice recognition is not a valid authentication factor

B Using only voice recognition counts as single-factor authentication

C Voice recognition belongs to "something you have" category

D Multi-factor authentication requires at least three factors

💡 Hint

Recall the definition of multi-factor authentication.

Multi-factor authentication requires two or more different types of factors. Using only voice recognition, which is "something you are," is single-factor authentication.

Practice

1. Which of the following is an example of something you know in authentication factors?

easy

A. A fingerprint

B. A password

C. A security token

D. A smartphone app

Solution

1. Step 1: Understand the category 'something you know'

   This factor refers to information only the user knows, like a password or PIN.

2. Step 2: Match options to categories

   A password is knowledge-based; a security token and smartphone app are 'something you have'; fingerprint is 'something you are'.

3. Final Answer:

   A password -> Option B

4. Quick Check:

   Knowledge factor = Password [OK]

Hint: Passwords are always 'something you know' [OK]

Common Mistakes:

• Confusing biometric (fingerprint) with knowledge
• Thinking a device (token) is knowledge
• Mixing possession with knowledge

2. Which of the following correctly represents something you have as an authentication factor?

easy

A. A hardware security key

B. A secret question answer

C. Your voice

D. Your birthdate

Solution

1. Step 1: Define 'something you have'

   This factor means a physical object you possess, like a hardware key or phone.

2. Step 2: Identify the correct option

   A hardware security key is a physical device you have; birthdate and secret answers are knowledge; voice is biometric.

3. Final Answer:

   A hardware security key -> Option A

4. Quick Check:

   Possession factor = Hardware key [OK]

Hint: Physical devices are 'something you have' [OK]

Common Mistakes:

• Choosing personal info as possession
• Confusing biometrics with possession
• Selecting knowledge-based answers

3. Consider this code snippet representing a simple authentication check:

user_input = '1234'
stored_pin = '1234'
if user_input == stored_pin:
    print('Access granted')
else:
    print('Access denied')

Which authentication factor does this code represent?

medium

A. Something you know

B. Something you have

C. Something you are

D. Something you do

Solution

1. Step 1: Analyze the code's authentication method

   The code compares a user input PIN to a stored PIN, verifying knowledge of a secret.

2. Step 2: Match the factor type

   Since it checks a secret code, it is 'something you know'.

3. Final Answer:

   Something you know -> Option A

4. Quick Check:

   PIN check = Knowledge factor [OK]

Hint: PIN or password checks are 'something you know' [OK]

Common Mistakes:

• Thinking code checks possession
• Confusing biometrics with PIN
• Selecting 'something you do' which is not standard

4. A system uses fingerprint scanning for login but sometimes denies access even for authorized users. What is the most likely cause?

medium

A. The fingerprint scanner is a 'something you know' factor

B. The system uses multi-factor authentication

C. Users forgot their passwords

D. The fingerprint sensor hardware is malfunctioning

Solution

1. Step 1: Understand fingerprint scanning as a biometric factor

   Fingerprint is 'something you are', relying on hardware to read biometrics accurately.

2. Step 2: Identify cause of denial

   If authorized users are denied, hardware malfunction or sensor errors are likely causes, not user knowledge or multi-factor setup.

3. Final Answer:

   The fingerprint sensor hardware is malfunctioning -> Option D

4. Quick Check:

   Biometric errors usually mean hardware issues [OK]

Hint: Biometric denial often means hardware problem [OK]

Common Mistakes:

• Confusing biometrics with knowledge factors
• Blaming password issues for fingerprint errors
• Assuming multi-factor causes denial

5. A company wants to improve security by requiring two authentication factors: a password and a fingerprint scan. Which statement best describes this setup?

hard

A. It uses only 'something you have' factors

B. It uses two 'something you know' factors

C. It uses multi-factor authentication combining knowledge and biometrics

D. It uses single-factor authentication

Solution

1. Step 1: Identify each factor type

   Password is 'something you know'; fingerprint is 'something you are' (biometric).

2. Step 2: Understand multi-factor authentication

   Using two different factor types together is multi-factor authentication, improving security.

3. Final Answer:

   It uses multi-factor authentication combining knowledge and biometrics -> Option C

4. Quick Check:

   Two different factor types = Multi-factor [OK]

Hint: Different factor types mean multi-factor authentication [OK]

Common Mistakes:

• Thinking password and fingerprint are same factor
• Confusing multi-factor with single-factor
• Assuming both are possession factors