FC0-U71 Security Practice Question
Which THREE of the following are examples of multi-factor authentication? (Select three.)
⚠ Common exam trap
FC0-U71 often tests whether candidates confuse 'multiple authentication steps' with 'multiple authentication factors' — picking two passwords or two biometrics because they look like two checks, when MFA strictly requires different factor categories.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A smart card and a PIN
Multi-factor authentication (MFA) requires combining factors from different categories: something you know (password, PIN), something you have (smart card, phone, token), and something you are (biometrics such as fingerprint or retina scan). Option A is correct because a smart card (something you have) plus a PIN (something you know) combines two distinct factor types. Option B is correct because a password (something you know) plus a fingerprint scan (something you are) also mixes two different factor categories. Option E is correct because a one-time code sent to a phone (something you have) plus a password (something you know) likewise draws on two separate factor types. Option C does not qualify because a retina scan and a fingerprint scan are both biometrics, i.e., two instances of the same 'something you are' factor. Option D does not qualify because a username and password are both 'something you know' and represent a single authentication factor.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A smart card and a PIN
Why this is correct
A smart card (something you have) combined with a PIN (something you know) draws on two distinct authentication factors, satisfying multi-factor authentication. Possession of the card alone or knowledge of the PIN alone is insufficient, so both categories must be presented to authenticate.
- ✓
A password and a fingerprint scan
Why this is correct
A password (something you know) paired with a fingerprint scan (something you are) combines knowledge and inherence factors, satisfying multi-factor authentication. Two different factor categories are required, so this pairing qualifies whereas two passwords would not.
- ✗
A retina scan and a fingerprint scan
Why it's wrong here
A retina scan and a fingerprint scan are both inherence factors, so combining them draws on a single authentication category. Multi-factor authentication requires different categories; biometrics pair correctly with a password or a hardware token, not with each other.
- ✗
A username and password
Why it's wrong here
A username and password are both 'something you know', so they represent one factor, not two. This pairing is single-factor authentication; multi-factor requires combining it with a different category such as a token or biometric.
- ✓
A one-time code sent to a phone and a password
Why this is correct
A one-time code sent to a phone (something you have) plus a password (something you know) uses two distinct factor categories, satisfying multi-factor authentication. The code proves possession of the registered device, while the password proves knowledge, so both are required.
Go deeper
Related to this question
About these practice questions
Courseiva writes every FC0-U71 question from scratch — 988 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.