Multi-factor authentication (MFA) in Cybersecurity - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding the factors in MFA

Which of the following combinations correctly represents the three common factors used in Multi-factor Authentication (MFA)?

A Something you know, something you want, something you have

B Something you know, something you have, something you are

C Something you have, something you want, something you are

D Something you are, something you want, something you know

💡 Hint

Think about the categories that cover knowledge, possession, and identity.

The three common factors in MFA are: something you know (like a password), something you have (like a phone or token), and something you are (like a fingerprint).

📋 Factual

intermediate

MFA effectiveness against phishing

Why does Multi-factor Authentication (MFA) provide better protection against phishing attacks compared to just using a password?

A Because MFA changes the password automatically after each login attempt

B Because MFA disables login attempts from unknown devices

C Because MFA requires a second factor that the attacker usually cannot obtain even if they have the password

D Because MFA encrypts the password making it impossible to steal

💡 Hint

Consider what an attacker gains if they only steal a password.

MFA adds a second factor that is typically physical or biometric, which an attacker cannot easily replicate even if they have the password, thus reducing the risk from phishing.

🔍 Analysis

advanced

Evaluating MFA methods for security

Which of the following MFA methods is considered the most secure against interception and replay attacks?

A Time-based One-Time Password (TOTP) generated by an authenticator app

B SMS-based one-time codes sent to a mobile phone

C Email-based verification codes

D Security questions answered by the user

💡 Hint

Think about which method does not rely on external communication channels vulnerable to interception.

TOTP generated by an authenticator app is more secure because it generates codes locally on the device and does not rely on potentially insecure channels like SMS or email.

❓ Comparison

advanced

Comparing biometric factors in MFA

Which biometric factor used in MFA is generally considered the least reliable due to higher false acceptance rates?

A Voice recognition

B Iris scanning

C Fingerprint recognition

D Facial recognition

💡 Hint

Consider environmental factors and ease of spoofing for each biometric.

Voice recognition is more susceptible to background noise and can be spoofed more easily, leading to higher false acceptance rates compared to other biometrics.

❓ Reasoning

expert

MFA implementation challenges in organizations

What is a common challenge organizations face when implementing Multi-factor Authentication (MFA) for all users, and how can it be effectively addressed?

A MFA systems are always expensive; this can be addressed by avoiding MFA for low-risk users

B MFA eliminates all security risks; no additional measures are needed

C MFA causes frequent system crashes; this can be addressed by limiting MFA to administrators only

D Users may resist MFA due to inconvenience; this can be addressed by providing clear communication and easy-to-use MFA options

💡 Hint

Think about user behavior and adoption challenges.

Users often find MFA inconvenient, which can lead to resistance. Organizations can improve adoption by educating users and choosing MFA methods that are user-friendly.