Authentication factors (something you know, have, are) in Cybersecurity - Mini Project: Build & Apply

Understanding Authentication Factors: Something You Know, Have, Are

📖 Scenario: You are learning about how systems verify who you are when you log in. This is important to keep your accounts safe. There are three main ways systems check your identity: something you know, something you have, and something you are.Imagine you are setting up a simple checklist to remember these three types of authentication factors.

🎯 Goal: Build a simple list of authentication factors with examples for each type: something you know, something you have, and something you are.

📋 What You'll Learn

Create a dictionary named auth_factors with keys for each factor type

Add a list of two examples for each factor type

Create a variable named factor_types that holds the keys of the dictionary

Use a for loop with variables factor and examples to iterate over auth_factors.items()

Add a final statement that sets a variable completed to True to mark the checklist as done

💡 Why This Matters

🌍 Real World

Authentication factors are used every day to protect online accounts, devices, and secure areas. Understanding these helps you recognize how security works and how to keep your information safe.

💼 Career

Knowledge of authentication factors is essential for cybersecurity roles, IT support, and anyone involved in designing or managing secure systems.

1

Create the authentication factors dictionary

Create a dictionary called auth_factors with these exact keys and values: 'something_you_know' with a list ['password', 'PIN'], 'something_you_have' with a list ['security token', 'smart card'], and 'something_you_are' with a list ['fingerprint', 'retina scan'].

Cybersecurity

# Create the auth_factors dictionary with the specified keys and example lists
# Your code here

Hint

Remember to use the exact key names and example lists as shown.

2

Create a variable for the factor types

Create a variable called factor_types that holds the list of keys from the auth_factors dictionary using the list() function and the keys() method.

Cybersecurity

auth_factors = {
    'something_you_know': ['password', 'PIN'],
    'something_you_have': ['security token', 'smart card'],
    'something_you_are': ['fingerprint', 'retina scan']
}
# Create factor_types as a list of keys from auth_factors
# Your code here

Hint

Use list(auth_factors.keys()) to get the keys as a list.

3

Loop over the authentication factors

Use a for loop with variables factor and examples to iterate over auth_factors.items(). Inside the loop, add a comment line describing that you would process each factor and its examples here.

Cybersecurity

auth_factors = {
    'something_you_know': ['password', 'PIN'],
    'something_you_have': ['security token', 'smart card'],
    'something_you_are': ['fingerprint', 'retina scan']
}
factor_types = list(auth_factors.keys())
# Use a for loop to go through auth_factors items
# Your code here

Hint

Use for factor, examples in auth_factors.items(): to loop through the dictionary.

4

Mark the checklist as completed

Add a variable called completed and set it to True to show the checklist is done.

Cybersecurity

auth_factors = {
    'something_you_know': ['password', 'PIN'],
    'something_you_have': ['security token', 'smart card'],
    'something_you_are': ['fingerprint', 'retina scan']
}
factor_types = list(auth_factors.keys())
for factor, examples in auth_factors.items():
    # Process each factor and its examples here
    pass
# Set completed to true to mark the checklist done
# Your code here

Hint

Just write completed = True to finish.

Practice

1. Which of the following is an example of something you know in authentication factors?

easy

A. A fingerprint

B. A password

C. A security token

D. A smartphone app

Solution

1. Step 1: Understand the category 'something you know'

   This factor refers to information only the user knows, like a password or PIN.

2. Step 2: Match options to categories

   A password is knowledge-based; a security token and smartphone app are 'something you have'; fingerprint is 'something you are'.

3. Final Answer:

   A password -> Option B

4. Quick Check:

   Knowledge factor = Password [OK]

Hint: Passwords are always 'something you know' [OK]

Common Mistakes:

• Confusing biometric (fingerprint) with knowledge
• Thinking a device (token) is knowledge
• Mixing possession with knowledge

2. Which of the following correctly represents something you have as an authentication factor?

easy

A. A hardware security key

B. A secret question answer

C. Your voice

D. Your birthdate

Solution

1. Step 1: Define 'something you have'

   This factor means a physical object you possess, like a hardware key or phone.

2. Step 2: Identify the correct option

   A hardware security key is a physical device you have; birthdate and secret answers are knowledge; voice is biometric.

3. Final Answer:

   A hardware security key -> Option A

4. Quick Check:

   Possession factor = Hardware key [OK]

Hint: Physical devices are 'something you have' [OK]

Common Mistakes:

• Choosing personal info as possession
• Confusing biometrics with possession
• Selecting knowledge-based answers

3. Consider this code snippet representing a simple authentication check:

user_input = '1234'
stored_pin = '1234'
if user_input == stored_pin:
    print('Access granted')
else:
    print('Access denied')

Which authentication factor does this code represent?

medium

A. Something you know

B. Something you have

C. Something you are

D. Something you do

Solution

1. Step 1: Analyze the code's authentication method

   The code compares a user input PIN to a stored PIN, verifying knowledge of a secret.

2. Step 2: Match the factor type

   Since it checks a secret code, it is 'something you know'.

3. Final Answer:

   Something you know -> Option A

4. Quick Check:

   PIN check = Knowledge factor [OK]

Hint: PIN or password checks are 'something you know' [OK]

Common Mistakes:

• Thinking code checks possession
• Confusing biometrics with PIN
• Selecting 'something you do' which is not standard

4. A system uses fingerprint scanning for login but sometimes denies access even for authorized users. What is the most likely cause?

medium

A. The fingerprint scanner is a 'something you know' factor

B. The system uses multi-factor authentication

C. Users forgot their passwords

D. The fingerprint sensor hardware is malfunctioning

Solution

1. Step 1: Understand fingerprint scanning as a biometric factor

   Fingerprint is 'something you are', relying on hardware to read biometrics accurately.

2. Step 2: Identify cause of denial

   If authorized users are denied, hardware malfunction or sensor errors are likely causes, not user knowledge or multi-factor setup.

3. Final Answer:

   The fingerprint sensor hardware is malfunctioning -> Option D

4. Quick Check:

   Biometric errors usually mean hardware issues [OK]

Hint: Biometric denial often means hardware problem [OK]

Common Mistakes:

• Confusing biometrics with knowledge factors
• Blaming password issues for fingerprint errors
• Assuming multi-factor causes denial

5. A company wants to improve security by requiring two authentication factors: a password and a fingerprint scan. Which statement best describes this setup?

hard

A. It uses only 'something you have' factors

B. It uses two 'something you know' factors

C. It uses multi-factor authentication combining knowledge and biometrics

D. It uses single-factor authentication

Solution

1. Step 1: Identify each factor type

   Password is 'something you know'; fingerprint is 'something you are' (biometric).

2. Step 2: Understand multi-factor authentication

   Using two different factor types together is multi-factor authentication, improving security.

3. Final Answer:

   It uses multi-factor authentication combining knowledge and biometrics -> Option C

4. Quick Check:

   Two different factor types = Multi-factor [OK]

Hint: Different factor types mean multi-factor authentication [OK]

Common Mistakes:

• Thinking password and fingerprint are same factor
• Confusing multi-factor with single-factor
• Assuming both are possession factors