Identifying True Multifactor Authentication Parameters

200-301 By islever Editorial Last updated

Describe security password policies elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)

Short answer

A A PIN (something you know) plus an RSA certificate/token (something you have) combines two different factor types, satisfying MFA.

Question

Company has decided to require multifactor authentication for all systems. Which set of parameters meets the requirement?
  1. personal 10-digit PIN and RSA certificate Correct Answer
  2. complex password and personal 10-digit PIN
  3. password of 8 to 15 characters and personal 12-digit PIN
  4. fingerprint scanning and facial recognition

Key Takeaways

MFA is about factor TYPES, not count of credentials. PIN+certificate = know+have; fingerprint+facial = are+are (still one type).

MFA requires two or more distinct factor types: knowledge (password/PIN), possession (token/certificate), or inherence (biometric). Two items from the same type (two passwords, or two biometrics) is not MFA.

Common mistake: Picking D (fingerprint + facial): both are 'something you are,' a single factor type, so it is not MFA. B/C mix two knowledge factors.

Expert Analysis

Why the Answer Is Correct

A is correct. It pairs a knowledge factor (the 10-digit PIN) with a possession factor (the RSA certificate/token), which is genuine multifactor authentication across two different types.

Why the Other Options Are Wrong

B and C each combine two knowledge factors (password/PIN), so they are single-factor. D combines two inherence factors (fingerprint + facial), again a single factor type, not MFA.

Community Comment Notes

The vote is A (100). A top comment lays out the factor taxonomy: A = know+have, B/C = know+know, D = are+are, confirming only A meets MFA.

Official Reference

https://learningnetwork.cisco.com/s/ccna-exam-topics

This link opens the official vendor documentation in a new tab.

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. nothanksimgucci 👍 12
    A: Something you know, something you have. B: Something you know, something you know. C: Something you know, something you know. D: Something you are, something you are. Given answer is correct.
  2. [Removed] 👍 3 Answered A
    A is correct The most effective multifactor authentication typically involves combining different types of authentication factors; such as something the user knows (password or PIN), something the user has (physical token or certificate)
  3. jeremykebir 👍 1
    It can be A or D.....

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Rapid PVST+ Port State That Neither Receives BPDUs nor Learns MAC

S-grade

Computing the EUI-64 Interface ID for a Given MAC Address

S-grade

Electing the Root Bridge in PVST+ by Priority and MAC

S-grade

How a Switch Handles an ARP Request for an Unknown Destination

S-grade

Practice All 200-301 Questions

Access 220 questions with complete answers and detailed explanations.

View Full 200-301 Practice Test →

← Back to 200-301 Study Guide