ISC2 Exam CISSP Topic 3 Question 94 Discussion

Actual exam question for ISC2's CISSP exam

Question #: 94
Topic #: 3

An information security professional is reviewing user access controls on a customer-facing application. The application must have multi-factor authentication (MFA) in place. The application currently requires a username and password to login. Which of the following options would BEST implement MFA?

AGeolocate the user and compare to previous logins

BRequire a pre-selected number as part of the login

CHave the user answer a secret question that is known to them

DEnter an automatically generated number from a hardware token

Show Suggested Answer

Suggested Answer: C

by Dick at Jul 16, 2024, 04:58 AM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Providencia

4 months ago

Geolocating the user? That's so 2010. We need something more cutting-edge, like a fingerprint scanner or retina scan. Option D is the future, people!

upvoted 0 times

Maynard

2 months ago

I've heard that some applications are starting to use facial recognition for MFA. That would be really advanced.

upvoted 0 times

...

Dulce

2 months ago

Retina scan would be the most secure option for MFA.

upvoted 0 times

...

Ezekiel

3 months ago

I think a fingerprint scanner would be even better than a hardware token.

upvoted 0 times

...

Xochitl

3 months ago

I agree, geolocating is outdated. We need something more secure like a hardware token.

upvoted 0 times

...

Carman

4 months ago

I mean, who doesn't love a good old-fashioned secret question? Option C all the way, keep it classic!

upvoted 0 times

Sheron

3 months ago

I think using a hardware token for an automatically generated number is the most secure option.

upvoted 0 times

...

Chery

3 months ago

I agree, secret questions are a classic choice for MFA.

upvoted 0 times

...

Marva

4 months ago

Hold up, are we sure the hardware tokens won't get lost or forgotten? Option B might be a better choice for user-friendliness.

upvoted 0 times

Elly

3 months ago

User 1

upvoted 0 times

...

Vincent

3 months ago

User 2

upvoted 0 times

...

Lashawnda

3 months ago

User 1

upvoted 0 times

...

Launa

4 months ago

I prefer option A because geolocating the user adds an extra layer of security.

upvoted 0 times

...

Elliot

4 months ago

Option C, the secret question, is a bit outdated. Hackers can easily find that information these days. Option D is the way to go for sure.

upvoted 0 times

...

Clemencia

4 months ago

I'd go with option B, a pre-selected number. It's simple to implement and users are already familiar with that kind of authentication.

upvoted 0 times

Kallie

3 months ago

Geolocating the user could also be a good additional layer of security.

upvoted 0 times

...

Junita

3 months ago

I prefer option D, using a hardware token for extra security.

upvoted 0 times

...

Mari

4 months ago

I agree, it's simple and familiar for users.

upvoted 0 times

...

Lashanda

4 months ago

I think option B is the best choice.

upvoted 0 times

...

Gertude

5 months ago

I agree with Annamaria, option D is the most secure method for implementing MFA.

upvoted 0 times

...

Annamaria

5 months ago

I think option D is the best choice because it involves something the user has (the hardware token).

upvoted 0 times

...

Ollie

5 months ago

Definitely option D, using a hardware token is the most secure way to implement MFA. You can't beat the convenience and reliability of a physical device.

upvoted 0 times

Devorah

4 months ago

User2

upvoted 0 times

...

Garry

5 months ago

User1

upvoted 0 times

...