CV0-004 Security Practice Question
A company is implementing multi-factor authentication (MFA) for cloud console access. Which TWO of the following are valid MFA methods? (Select TWO.)
⚠ Common exam trap
CompTIA Cloud+ often tests the distinction between multi-step authentication (e.g., password then security question) and true multi-factor authentication, where candidates mistakenly believe any two sequential credentials count as MFA.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A password and a hardware TOTP token
A hardware TOTP token generates a time-based one-time password (RFC 6238) that changes every 30 or 60 seconds, providing a second factor independent of the user's password. Combining this with a password satisfies the MFA requirement of using two different authentication factors (something you know and something you have).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A password and a hardware TOTP token
Why this is correct
Combines something you know (password) with something you have (token).
- ✗
Two different passwords
Why it's wrong here
Passwords are both something you know; not MFA.
- ✗
A password and a security question
Why it's wrong here
Security questions are considered something you know, not a second factor.
- ✗
A username and password
Why it's wrong here
Username is not a factor; password alone is single factor.
- ✓
A fingerprint and a smart card
Why this is correct
Biometric (fingerprint) and hardware (smart card) are two different factors.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 977 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.