CompTIA Cloud+ Practice Test

What type of authentication system could Mary suggest that requires both something you have and something you know?

1. Single Sign-On

2. Confederations

3. Active Directory/LDAP

4. Multifactor

The correct answer is: Multifactor

The correct choice is multifactor authentication because this type of system enhances security by requiring two or more different methods of authentication from independent categories. Specifically, it combines something you have (like a hardware token or a mobile device) with something you know (such as a password or PIN). This dual requirement significantly increases the security of the authentication process, as both parts must be satisfied for access to be granted. Single sign-on allows users to authenticate once and gain access to multiple systems, but it does not inherently require multiple forms of verification. Confederations refer to the linking of federated identity management systems, which may not fit the context of needing both possession and knowledge for authentication directly. Active Directory/LDAP is primarily concerned with managing user identities and permissions rather than the authentication mechanisms themselves, so it does not specify the process of requiring both something you have and something you know. Hence, multifactor authentication is the best fit for Mary’s suggestion.