Preparing for your next security certification exam? After trying your hand at this practice test question, join the FREE CertMike Study Group for the CISSP, Security+, CySA+, or SSCP certification to receive new questions each week. You’ll also receive free access to my customized study strategies.

Connor would like to implement a multifactor authentication system for physical access to his data center. He is currently using a fingerprint scan. Which one of the following would be the best second authentication technique to use in combination with the fingerprint scan?


A. ID card
B. Retinal scan
C. Security questions
D. Voiceprint analysis


Correct Answer: A.


Retinal scans and voiceprint analysis are both examples of biometric controls and, when used in combination with a fingerprint scan, would not constitute multifactor authentication. Security questions are a knowledge-based factor but would be difficult to implement for physical access and are generally not a very secure authentication technique due to the ease of a third party discovering correct answers in many cases. ID cards are a “something you have” factor and would be an ideal pairing for the fingerprint scan.