Which statement best defines multi-factor authentication and provides a correct example of common methods used in enterprises?

Which statement best defines multi-factor authentication and provides a correct example of common methods used in enterprises?

• A. MFA is a single password-based approach.
• B. Multi-factor authentication requires two or more factors; examples include TOTP ( authenticator app ) and hardware token or push-based 2FA.
• C. MFA relies on a single biometric scan.
• D. MFA is a firewall feature.

Answer: (B)

Multi-factor authentication requires presenting at least two different kinds of verification to prove who you are, typically drawn from three categories: something you know (like a password), something you have (such as a hardware token or a device), and something you are (biometrics). This combination makes it much harder for an attacker to gain access because stealing one factor isn’t enough. In practice, enterprises commonly use methods like time-based one-time passwords generated by an authenticator app (TOTP), hardware security tokens that you physically possess, or push-based 2FA that asks you to approve a login on a trusted device. These examples illustrate the use of more than one factor and are widely adopted in real-world networks and services. The other statements don’t fit because using only a single password is a single factor, a single biometric scan is still one factor, and a firewall feature isn’t part of the authentication process.

Multi-factor authentication requires presenting at least two different kinds of verification to prove who you are, typically drawn from three categories: something you know (like a password), something you have (such as a hardware token or a device), and something you are (biometrics). This combination makes it much harder for an attacker to gain access because stealing one factor isn’t enough.

In practice, enterprises commonly use methods like time-based one-time passwords generated by an authenticator app (TOTP), hardware security tokens that you physically possess, or push-based 2FA that asks you to approve a login on a trusted device. These examples illustrate the use of more than one factor and are widely adopted in real-world networks and services.

The other statements don’t fit because using only a single password is a single factor, a single biometric scan is still one factor, and a firewall feature isn’t part of the authentication process.