Which statement lists the five authentication factors correctly and describes how MFA uses them?

Which statement lists the five authentication factors correctly and describes how MFA uses them?

• A. Something you know, something you have, something you are, something you do, and somewhere you are.
• B. Knowledge, possession, and biometrics
• C. Only something you know and something you have
• D. What you do, where you are, and what you see

Answer: (D)

Multi-factor authentication relies on combining verification from multiple categories so that a breach of one factor doesn’t grant access. The five recognized factors are: something you know (like a password or PIN), something you have (a token or hardware key), something you are (biometrics such as a fingerprint or iris scan), something you do (behavioral cues like keystroke dynamics or a particular way you interact with the device), and somewhere you are (location or network context). MFA uses them by requiring at least two different factors from these categories during authentication, which strengthens security by making it harder for attackers who only know one factor to gain access. The best statement here lists all five factors, capturing the full breadth of MFA categories. It aligns with how MFA is designed to work and why it’s more secure than using a single factor or a mix that omits key categories. The other options fall short because they either skip factors (fewer than five), group distinct factors (like biometrics) into a single item, claim “Only” two factors, or include nonstandard notions (such as “what you see”) that aren’t recognized as a separate factor.

Multi-factor authentication relies on combining verification from multiple categories so that a breach of one factor doesn’t grant access. The five recognized factors are: something you know (like a password or PIN), something you have (a token or hardware key), something you are (biometrics such as a fingerprint or iris scan), something you do (behavioral cues like keystroke dynamics or a particular way you interact with the device), and somewhere you are (location or network context). MFA uses them by requiring at least two different factors from these categories during authentication, which strengthens security by making it harder for attackers who only know one factor to gain access.

The best statement here lists all five factors, capturing the full breadth of MFA categories. It aligns with how MFA is designed to work and why it’s more secure than using a single factor or a mix that omits key categories.

The other options fall short because they either skip factors (fewer than five), group distinct factors (like biometrics) into a single item, claim “Only” two factors, or include nonstandard notions (such as “what you see”) that aren’t recognized as a separate factor.