Authentication factors (something you know, have, are) in Cybersecurity - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the sentence to identify an example of something you know in authentication.

Cybersecurity

An example of something you know is a [1].

Drag options to blanks, or click blank then click option'

Apassword

Bfingerprint

Csecurity token

Dretina scan

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing a physical item instead of a secret.

A password is a secret piece of information that you know, used to verify your identity.

2fill in blank

medium

Complete the sentence to identify an example of something you have in authentication.

Cybersecurity

An example of something you have is a [1].

Drag options to blanks, or click blank then click option'

Asecurity token

Bpassword

Cvoice recognition

Dface scan

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing physical items with biometric traits.

A security token is a physical device you possess to prove your identity.

3fill in blank

hard

Fix the error in the sentence describing something you are in authentication.

Cybersecurity

An example of something you are is a [1].

Drag options to blanks, or click blank then click option'

Apassword

BPIN code

Csecurity token

Dfingerprint

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing something you know or have instead of a biometric.

A fingerprint is a biometric trait that identifies you based on your physical characteristics.

4fill in blank

hard

Fill both blanks to complete the two-factor authentication example.

Cybersecurity

Two-factor authentication requires [1] and [2].

Drag options to blanks, or click blank then click option'

Asomething you know

Bsomething you have

Csomething you are

Dsomething you guess

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing two factors of the same type.

Two-factor authentication combines something you know (like a password) and something you have (like a security token) to increase security.

5fill in blank

hard

Fill all three blanks to correctly classify the authentication factors.

Cybersecurity

The three main authentication factors are [1], [2], and [3].

Drag options to blanks, or click blank then click option'

Asomething you know

Bsomething you have

Csomething you are

Dsomething you want

Attempts:

3 left

💡 Hint

Common Mistakes

Including incorrect or unrelated factors.

The three main authentication factors are something you know (like a password), something you have (like a token), and something you are (like a fingerprint).

Practice

1. Which of the following is an example of something you know in authentication factors?

easy

A. A fingerprint

B. A password

C. A security token

D. A smartphone app

Solution

1. Step 1: Understand the category 'something you know'

   This factor refers to information only the user knows, like a password or PIN.

2. Step 2: Match options to categories

   A password is knowledge-based; a security token and smartphone app are 'something you have'; fingerprint is 'something you are'.

3. Final Answer:

   A password -> Option B

4. Quick Check:

   Knowledge factor = Password [OK]

Hint: Passwords are always 'something you know' [OK]

Common Mistakes:

• Confusing biometric (fingerprint) with knowledge
• Thinking a device (token) is knowledge
• Mixing possession with knowledge

2. Which of the following correctly represents something you have as an authentication factor?

easy

A. A hardware security key

B. A secret question answer

C. Your voice

D. Your birthdate

Solution

1. Step 1: Define 'something you have'

   This factor means a physical object you possess, like a hardware key or phone.

2. Step 2: Identify the correct option

   A hardware security key is a physical device you have; birthdate and secret answers are knowledge; voice is biometric.

3. Final Answer:

   A hardware security key -> Option A

4. Quick Check:

   Possession factor = Hardware key [OK]

Hint: Physical devices are 'something you have' [OK]

Common Mistakes:

• Choosing personal info as possession
• Confusing biometrics with possession
• Selecting knowledge-based answers

3. Consider this code snippet representing a simple authentication check:

user_input = '1234'
stored_pin = '1234'
if user_input == stored_pin:
    print('Access granted')
else:
    print('Access denied')

Which authentication factor does this code represent?

medium

A. Something you know

B. Something you have

C. Something you are

D. Something you do

Solution

1. Step 1: Analyze the code's authentication method

   The code compares a user input PIN to a stored PIN, verifying knowledge of a secret.

2. Step 2: Match the factor type

   Since it checks a secret code, it is 'something you know'.

3. Final Answer:

   Something you know -> Option A

4. Quick Check:

   PIN check = Knowledge factor [OK]

Hint: PIN or password checks are 'something you know' [OK]

Common Mistakes:

• Thinking code checks possession
• Confusing biometrics with PIN
• Selecting 'something you do' which is not standard

4. A system uses fingerprint scanning for login but sometimes denies access even for authorized users. What is the most likely cause?

medium

A. The fingerprint scanner is a 'something you know' factor

B. The system uses multi-factor authentication

C. Users forgot their passwords

D. The fingerprint sensor hardware is malfunctioning

Solution

1. Step 1: Understand fingerprint scanning as a biometric factor

   Fingerprint is 'something you are', relying on hardware to read biometrics accurately.

2. Step 2: Identify cause of denial

   If authorized users are denied, hardware malfunction or sensor errors are likely causes, not user knowledge or multi-factor setup.

3. Final Answer:

   The fingerprint sensor hardware is malfunctioning -> Option D

4. Quick Check:

   Biometric errors usually mean hardware issues [OK]

Hint: Biometric denial often means hardware problem [OK]

Common Mistakes:

• Confusing biometrics with knowledge factors
• Blaming password issues for fingerprint errors
• Assuming multi-factor causes denial

5. A company wants to improve security by requiring two authentication factors: a password and a fingerprint scan. Which statement best describes this setup?

hard

A. It uses only 'something you have' factors

B. It uses two 'something you know' factors

C. It uses multi-factor authentication combining knowledge and biometrics

D. It uses single-factor authentication

Solution

1. Step 1: Identify each factor type

   Password is 'something you know'; fingerprint is 'something you are' (biometric).

2. Step 2: Understand multi-factor authentication

   Using two different factor types together is multi-factor authentication, improving security.

3. Final Answer:

   It uses multi-factor authentication combining knowledge and biometrics -> Option C

4. Quick Check:

   Two different factor types = Multi-factor [OK]

Hint: Different factor types mean multi-factor authentication [OK]

Common Mistakes:

• Thinking password and fingerprint are same factor
• Confusing multi-factor with single-factor
• Assuming both are possession factors