Security+ Question of the Week: Authentication System

What is the authentication system that requires a formal enrollment process?

A. OTP token
B. Smart card
C. Passphrase
D. Biometric

Reveal Answer

The correct answer is D.

Biometrics require a formal enrollment process because the person must be physically present at the time the biometric authentication factor is created. It is not possible to create a temporary or one-time-use version of biometric, like what can be done with passwords. Thus, formal enrollment or in-person enrollment is required with biometrics.

A OTP (one time password) token can be sent to someone via a delivery service or left on their desk, thus, in-person formal enrollment is not necessarily required. A smart card as a physical token can be sent to someone via a delivery service or left on their desk, thus, in-person formal enrollment is not necessarily required. However, if the smart card includes a biometric element, then formal enrollment for that biometric element is required. A passphrase is simply a version of a password, thus, in-person formal enrollment is not necessarily required.

 

Related Courses
Security+ Prep Course (SY0-401)
Security+ Certification Boot Camp (SY0-401)

Security+ Question of the Week (SY0-401) Series

• Security+ Question of the Week: Deploying a Firewall
• Security+ Question of the Week: Flood Guard
• Security+ Question of the Week: iSCSI
• Security+ Question of the Week: Wireless MAC Filtering
• Security+ Question of the Week: Quantitative Analysis
• Security+ Question of the Week: Contracts
• Security+ Question of the Week: System Clock
• Security+ Question of the Week: Security Breach Incident Response
• Security+ Question of the Week: Reduce Electrostatic Discharge
• Security+ Question of the Week: Planting Malware
• Security+ Question of the Week: Network Hardening
• Security+ Question of the Week: Fuzzing
• Security+ Question of the Week: Single Sign‐On
• Security+ Question of the Week: Digital Envelope
• Security+ Question of the Week: Confining Communications to a Subnet
• Security+ Question of the Week: DoS Tool
• Security+ Question of the Week: Intranet Defense
• Security+ Question of the Week: War Driving
• Security+ Question of the Week: User Rights and Permissions Checks
• Security+ Question of the Week: Third Party Partnerships
• Security+ Question of the Week: Indicator of Integrity
• Security+ Question of the Week: Incident Response Procedure
• Security+ Question of the Week: Good Password Behavior
• Security+ Question of the Week: Tailgating
• Security+ Question of the Week: Differential Backup
• Security+ Question of the Week: Government and Military
• Security+ Question of the Week: Backdoor
• Security+ Question of the Week: Wrong Name or Address
• Security+ Question of the Week: Increase in Email Hoaxes
• Security+ Question of the Week: Suspicious Location-Based Messages
• Security+ Question of the Week: Session Hijack
• Security+ Question of the Week: Definition of a Threat
• Security+ Question of the Week: Dismiss Alarms
• Security+ Question of the Week: NoSQL vs. SQL Database
• Security+ Question of the Week: BYOD Compliance
• Security+ Question of the Week: Missing Storage Devices
• Security+ Question of the Week: Data Processed by an Application
• Security+ Question of the Week: LDAP Port
• Security+ Question of the Week: Authentication System

from
CERTIVIEW