Valid Multifactor Authentication Factors
Which three authentication factors are valid for use in a multifactor authentication scenario? (Choose three.)
Community Insight
Tests knowledge of MFA factor definitions while distinguishing between static biometrics (are), possession (have), and memory (know) versus behavioral or invalid options.
Identifies the three primary categories of authentication factors: something you know, have, and are. This page explains why these are the standard components of multifactor authentication (MFA) scenarios.
Learners often select 'Something you do' as a valid factor due to confusion with behavioral biometrics, but in standard exam contexts, this is not one of the three core factors.
Community Discussion (1 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Multifactor authentication requires evidence from at least two different categories of credentials. The three universally recognized categories are: Something You Know (knowledge factors like passwords/PINs), Something You Have (possession factors like tokens/smart cards), and Something You Are (inherence factors like fingerprints/iris scans). Options A, B, and C correspond exactly to these three pillars.Why the Other Options Are Wrong
'Something you do' (Option D) refers to behavioral biometrics (e.g., typing rhythm), which is a subset of inherence but rarely classified as a distinct third pillar in foundational certification exams compared to the standard triad. 'Something you earn' (Option E) and 'Something you see' (Option F) are not recognized authentication factors in cybersecurity standards.Community Comment Notes
The community consensus correctly identifies ABC as the answer. As Roattana noted, the explanation clearly defines the memorized information, physical objects, and unique physical characteristics associated with each factor.Exam Strategy
Memorize the classic triad of MFA: Know, Have, Are. When faced with behavioral options like 'do' or 'say', remember that while they exist in advanced systems, the fundamental exam answer always prioritizes the original three categories.
Frequently Asked Questions
Is 'Something you do' ever considered a valid MFA factor?
Behavioral biometrics fall under 'Something you are'. For exam purposes, stick to the core triad of Know, Have, and Are.
What is an example of Something you have?
Examples include hardware tokens, smart cards, smartphones receiving OTPs, or YubiKeys.