hardMultiple ChoiceObjective-mapped
ISC2 CC Practice Question: Wants to implement a policy where employees must…
An organization wants to implement a policy where employees must use a smart card and a PIN to access sensitive data. This is an example of:
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Multi-factor authentication (two factors)
Multi-factor authentication (MFA) requires two or more different types of authentication factors. Here, the smart card (something you have) and PIN (something you know) constitute two factors, making it MFA.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Multi-factor authentication (two factors)
Why this is correct
Correct. This is MFA because it combines something you have (smart card) and something you know (PIN).
- ✗
Single factor authentication
Why it's wrong here
Single factor uses only one type, but this method uses two distinct factors.
- ✗
Two-factor authentication
Why it's wrong here
Two-factor authentication is a subset of MFA, but MFA is the broader correct term. However, the option is phrased as 'Two-factor' alone, which may be considered correct but less precise. The intended correct answer is MFA.
- ✗
Biometric authentication
Why it's wrong here
Biometric uses biological traits; not used here.
Go deeper
Related to this question
Learn chapter
Authentication and Authorization Methods
Key term
Common Access Card
A Common Access Card (CAC) is a smart card issued by the U.S. Department of Defense that serves as a single identification, authentication, and access credential for military personnel and contractors.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
This CC question is part of Courseiva's 976-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.