Authentication factors (something you know, have, are) in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does the authentication factor "something you know" refer to?

It refers to information that only the user should know, such as a password, PIN, or answer to a security question.

beginner

Give an example of "something you have" in authentication.

An example is a physical item like a security token, a smartphone with an authentication app, or a smart card that the user possesses.

beginner

What does "something you are" mean in authentication factors?

It means using a unique physical characteristic of the user, such as a fingerprint, facial recognition, or iris scan, to verify identity.

intermediate

Why is multi-factor authentication more secure than single-factor authentication?

Because it requires two or more different types of authentication factors, making it harder for attackers to gain access by compromising just one factor.

intermediate

What is an example of combining "something you know" and "something you have"?

Using a password (something you know) together with a one-time code sent to your phone (something you have) is a common multi-factor authentication method.

Which of the following is an example of "something you are"?

A Security token

B Fingerprint scan

C Password

D PIN

Fingerprint scan is a biometric factor, which is "something you are".

What type of authentication factor is a smartphone app that generates a code?

A Something you do

B Something you know

C Something you are

D Something you have

A smartphone app that generates codes is considered a possession factor because it runs on a device you have, so it is "something you have".

Which factor does a password belong to?

A Something you have

B Something you are

C Something you know

D Something you do

A password is information you know, so it belongs to "something you know".

Why is using only a password considered less secure?

A It uses only one authentication factor

B Passwords are always easy to guess

C Passwords expire too quickly

D Passwords are biometric data

Using only a password means relying on a single factor, which is less secure than multi-factor authentication.

Which combination is an example of multi-factor authentication?

A Password and security token

B Fingerprint and facial recognition

C PIN and password

D Password and PIN

Password (something you know) plus security token (something you have) combine two different factors.

Explain the three main types of authentication factors and give one example for each.

Think about knowledge, possession, and physical traits.

Why is multi-factor authentication recommended over single-factor authentication?

Consider how combining factors protects better.