What is multi-factor authentication (MFA)?

What is multi-factor authentication (MFA)?

• A. MFA requires only a password.
• B. MFA requires two or more verification factors.
• C. MFA is less secure than password-only.
• D. MFA relies solely on biometric data.

Answer: (B)

The key idea being tested is that authentication becomes stronger when more than one form of evidence is required to prove who you are. Multi-factor authentication combines two or more verification factors from different categories, making it much harder for someone to gain access with just one stolen credential. In practice, MFA means you verify your identity using two or more factors. These factors usually come from different groups: something you know (like a password), something you have (such as a code from an authenticator app or a hardware security key), and something you are (biometric data like a fingerprint). By needing multiple kinds of proof, even if one factor is compromised, the others still protect the account. This is why the option describing two or more verification factors is the best answer. The other statements describe single-factor authentication (relying only on a password), claim MFA is less secure than password-only (which isn’t true—MFA increases security), or state MFA relies solely on biometric data (which would not be multiple factors).

The key idea being tested is that authentication becomes stronger when more than one form of evidence is required to prove who you are. Multi-factor authentication combines two or more verification factors from different categories, making it much harder for someone to gain access with just one stolen credential.

In practice, MFA means you verify your identity using two or more factors. These factors usually come from different groups: something you know (like a password), something you have (such as a code from an authenticator app or a hardware security key), and something you are (biometric data like a fingerprint). By needing multiple kinds of proof, even if one factor is compromised, the others still protect the account.

This is why the option describing two or more verification factors is the best answer. The other statements describe single-factor authentication (relying only on a password), claim MFA is less secure than password-only (which isn’t true—MFA increases security), or state MFA relies solely on biometric data (which would not be multiple factors).