PCI SSCPCI DSSAccess ControlEASYFree question
What is multi-factor authentication (MFA)?
- A.Authentication requiring two or more independent factors from different categories: something you know, something you have, or something you are
- B.Login through a single channel confirmed twice: a numeric code sent by text message, then that same code manually re-entered a second time for confirmation
- C.Access granted after one verification step repeated twice: a PIN generated by the same mobile application, resent automatically for a second confirmation
- D.Verification using one factor repeated twice: a password chosen at signup, then that identical password entered again moments later for confirmation
Why A is correct
MFA requires two or more independent authentication factors from different categories (knowledge, possession, inherence), making it significantly harder for unauthorized users to gain access even if one factor is compromised.
Know someone studying for PCI DSS? Send them this one.