FC0-U71 Security Practice Question
Which of the following is an example of something you are in multi-factor authentication?
⚠ Common exam trap
The trap is that candidates confuse authentication factors with authentication methods — they may pick 'one-time passcode' thinking it's a distinct factor, but OTP is a possession factor, and only biometrics qualify as 'something you are.'
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Fingerprint scan
In multi-factor authentication, the three factor categories are something you know (password, PIN), something you have (smart card, token, phone), and something you are (biometric — fingerprint, retina, face). A fingerprint scan is a biometric, which falls under 'something you are,' making it the correct example of an 'are' factor.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Password
Why it's wrong here
A password is something you know, a knowledge factor, not an inherence factor. Something you are requires a biometric measurement such as a fingerprint or facial scan. Passwords would be the answer if the question asked for something you know.
- ✓
Fingerprint scan
Why this is correct
A fingerprint scan is a biometric characteristic inherent to the user's body, making it an inherence factor — the "something you are" category. It differs from possession factors such as tokens and knowledge factors such as passwords, matching the stem's requirement for a multi-factor authentication example.
- ✗
Smart card
Why it's wrong here
A smart card is something you have, a possession factor, presented and read by a terminal. Something you are requires a biometric trait measured from the body, such as a fingerprint. Smart cards would be correct if the question asked for something you have.
- ✗
One-time passcode
Why it's wrong here
A one-time passcode is something you have or receive, typically delivered to a possessed device or token, making it a possession factor. Something you are requires a biometric measurement. One-time passcodes would be correct if the question asked for a possession or knowledge factor.
Go deeper
Related to this question
About these practice questions
This FC0-U71 question is part of Courseiva's 988-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.