A security layer that requires the user to provide two or more pieces of evidence to be authenticated

A security layer that requires the user to provide two or more pieces of evidence to be authenticated

• A. Single-factor authentication
• B. Biometric authentication
• C. Password policy enforcement
• D. Multifactor authentication (MFA)

Answer: (D)

Requiring two or more pieces of evidence to verify identity is multifactor authentication. It strengthens security by combining different types of credentials—something you know (like a password), something you have (such as a hardware token or mobile device), and/or something you are (biometrics). Using at least two distinct factors means an attacker would need to compromise more than one credential, making unauthorized access much harder. Single-factor authentication uses only one credential, so it’s easier to breach. A biometric authentication method describes a type of evidence, but on its own it’s still a single factor unless paired with another factor. Password policy enforcement governs how passwords are created and used, not the authentication process itself. Multifactor authentication specifically denotes the use of two or more factors, which is why it best fits the description.

Requiring two or more pieces of evidence to verify identity is multifactor authentication. It strengthens security by combining different types of credentials—something you know (like a password), something you have (such as a hardware token or mobile device), and/or something you are (biometrics). Using at least two distinct factors means an attacker would need to compromise more than one credential, making unauthorized access much harder.

Single-factor authentication uses only one credential, so it’s easier to breach. A biometric authentication method describes a type of evidence, but on its own it’s still a single factor unless paired with another factor. Password policy enforcement governs how passwords are created and used, not the authentication process itself. Multifactor authentication specifically denotes the use of two or more factors, which is why it best fits the description.