システム管理者は、データ センターの認証システムを選択しています。会社のセキュリティ ポリシーでは、システムが MFA をサポートすることが義務付けられています。管理者は、ポリシー要件を満たすために、次のオプションのどれを展開する必要がありますか。
正解:C
Multi-Factor Authentication (MFA) requires the use of two or more different authentication factors to verify a user's identity. The three main authentication factors are:
* Something You Know - Password, PIN, security questions
* Something You Have - Smart card, key fob, RFID chip
* Something You Are - Biometrics such as fingerprint, retina scan
Option C (RFID chip and PIN code) meets the MFA requirement because:
* RFID chip (Something You Have) provides a physical security token.
* PIN code (Something You Know) adds a knowledge-based authentication factor.
Other Options:
* A. Retinal scan and fingerprint reader: Both are biometric factors (Something You Are) and do not satisfy MFA requirements, which need at least two different categories.
* B. Key fob and employee badge: Both are physical items (Something You Have), failing to meet MFA requirements.
* D. An alphanumeric, case-sensitive password with symbols: This only represents Something You Know, not MFA.
Thus, RFID chip and PIN code (Option C) provides two separate authentication factors and meets the MFA policy requirements.
References:
* CompTIA Server+ Certification Exam Objectives (SK0-005): Security and Disaster Recovery - Explain authentication and access control