ISC2 Exam CISSP Topic 4 Question 92 Discussion

Actual exam question for ISC2's CISSP exam

Question #: 92
Topic #: 4

An information security professional is reviewing user access controls on a customer-facing application. The application must have multi-factor authentication (MFA) in place. The application currently requires a username and password to login. Which of the following options would BEST implement MFA?

AGeolocate the user and compare to previous logins

BRequire a pre-selected number as part of the login

CHave the user answer a secret question that is known to them

DEnter an automatically generated number from a hardware token

Show Suggested Answer

Suggested Answer: C

by Theron at Jul 02, 2024, 12:30 PM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Edmond

5 months ago

But what if the user travels frequently? Option D would still be more secure in that case.

upvoted 0 times

...

Della

5 months ago

I disagree, I believe option A is better as it adds an extra layer of security by geolocating the user.

upvoted 0 times

...

Jessenia

5 months ago

Option D is the way to go! I mean, an automatically generated number from a hardware token? That's the epitome of multi-factor authentication. Gotta love that extra layer of security, am I right?

upvoted 0 times

Bettina

4 months ago

I agree, having that automatically generated number is a great way to ensure only authorized users can access the application.

upvoted 0 times

...

Daniel

4 months ago

Option D is definitely the best choice. That hardware token adds a solid extra layer of security.

upvoted 0 times

...

Herman

5 months ago

Haha, option B? Really? A pre-selected number? That's about as secure as using 'password123' as your login. D all the way, folks!

upvoted 0 times

...

5 months ago

Hmm, I'd say D is the clear winner here. Can't beat the convenience of a hardware token, plus it adds that extra layer of protection. Beats having to remember a secret question any day!

upvoted 0 times

Vivienne

4 months ago

Yeah, D is the most reliable choice for sure. It's quick and easy to use.

upvoted 0 times

...

Jacklyn

5 months ago

I agree, D is definitely the most secure option. Hardware tokens are the way to go.

upvoted 0 times

...

Edmond

5 months ago

I think option D is the best choice because it involves something the user has (the hardware token).

upvoted 0 times

...

Giuseppe

6 months ago

Option D is the way to go! An automatically generated number from a hardware token is the epitome of multi-factor authentication. Gotta love that extra layer of security!

upvoted 0 times

Patti

5 months ago

Definitely, using a hardware token for generating numbers adds a strong layer of security.

upvoted 0 times

...

Patti

5 months ago

I agree, option D is the most secure choice for implementing MFA.

upvoted 0 times

...