What is Multi-factor authentication (MFA)?
In short
Multi-factor authentication (MFA) requires a user to present factors from at least two different categories: something they know, something they have and something they are.
Key takeaways
- A password plus a security question is two knowledge factors, so it isn't multi-factor.
- A password plus a code from a phone app is multi-factor.
- It greatly reduces the risk from stolen passwords.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A system requires users to enter a password and then answer a personal security question. Does this constitute multi-factor authentication?