SSCP Access Controls Practice Question
An organization is implementing multi-factor authentication (MFA). Which TWO of the following are examples of something you have?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Smart card
Something you have includes physical tokens like smart cards and hardware tokens. Biometrics are something you are, and passwords are something you know.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Smart card
Why this is correct
A smart card is a physical device, thus something you have.
- ✗
PIN
Why it's wrong here
PIN is something you know.
- ✗
Retina scan
Why it's wrong here
Retina scan is a biometric factor.
- ✓
Hardware token (e.g., YubiKey)
Why this is correct
A hardware token is a physical possession.
- ✗
Fingerprint
Why it's wrong here
Fingerprint is biometric, something you are.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SSCP question from scratch — 920 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on SSCP
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which of the following is a common method for implementing multi-factor authentication (MFA) using something you have and something you know?
easy- A.Fingerprint and retina scan
- ✓ B.Smart card and PIN
- C.Password and security question
- D.Username and password
Why B: A smart card (something you have) combined with a PIN (something you know) is a classic MFA implementation.
Variation 2. An organization is planning to implement multi-factor authentication. Which TWO of the following are valid authentication factors?
easy- A.Security question
- ✓ B.Fingerprint
- C.Password
- ✓ D.Smart card
- E.IP address
Why B: The three categories are something you know, something you have, and something you are. Fingerprint (something you are) and smart card (something you have) are valid factors.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.