Valid Multifactor Authentication Factors
Short answer
ABC Something you have, Something you are, and Something you know are the three valid authentication factors for a multifactor authentication scenario.
Question
Key Takeaways
Tests knowledge of MFA factor definitions while distinguishing between static biometrics (are), possession (have), and memory (know) versus behavioral or invalid options.
Identifies the three primary categories of authentication factors: something you know, have, and are. This page explains why these are the standard components of multifactor authentication (MFA) scenarios.
Common mistake: Learners often select 'Something you do' as a valid factor due to confusion with behavioral biometrics, but in standard exam contexts, this is not one of the three core factors.
Expert Analysis
Why the Answer Is Correct
Multifactor authentication requires evidence from at least two different categories of credentials. The three universally recognized categories are: Something You Know (knowledge factors like passwords/PINs), Something You Have (possession factors like tokens/smart cards), and Something You Are (inherence factors like fingerprints/iris scans). Options A, B, and C correspond exactly to these three pillars.
Why the Other Options Are Wrong
'Something you do' (Option D) refers to behavioral biometrics (e.g., typing rhythm), which is a subset of inherence but rarely classified as a distinct third pillar in foundational certification exams compared to the standard triad. 'Something you earn' (Option E) and 'Something you see' (Option F) are not recognized authentication factors in cybersecurity standards.
Community Comment Notes
The community consensus correctly identifies ABC as the answer. As Roattana noted, the explanation clearly defines the memorized information, physical objects, and unique physical characteristics associated with each factor.
Exam Strategy
Memorize the classic triad of MFA: Know, Have, Are. When faced with behavioral options like 'do' or 'say', remember that while they exist in advanced systems, the fundamental exam answer always prioritizes the original three categories.
Frequently Asked Questions
Is 'Something you do' ever considered a valid MFA factor?
What is an example of Something you have?
Discussion 1 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 1
-
Roattana 👍 1• Something you know: This refers to information that a user must memorize, such as a password, PIN, or answers to security questions. • Something you have: This refers to a physical object or digital token in the user's possession, such as a smartphone, smart card, or hardware key (e.g., YubiKey). • Something you are: This refers to unique physical characteristics or biometrics, such as a fingerprint, facial recognition, or iris scan.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.