hardMultiple SelectObjective-mapped
SSCP Practice Question: Which THREE of the following are common methods…
Which THREE of the following are common methods for implementing multifactor authentication (MFA)?
⚠ Common exam trap
ISC2 often tests the distinction between using multiple instances of the same factor (e.g., two biometrics or two passwords) versus using factors from different categories, which is the core requirement for true MFA.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Password and SMS code
It combines something you know (password) with something you have (SMS code sent to a registered device). This satisfies the MFA requirement of using at least two distinct authentication factors, making it significantly more secure than single-factor password-only authentication.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Retina scan and facial recognition
Why it's wrong here
Both are biometric (something you are), not MFA.
- ✓
Password and SMS code
Why this is correct
Something you know (password) + something you have (phone for SMS).
- ✓
Smart card and PIN
Why this is correct
Something you have (smart card) + something you know (PIN).
- ✗
Password and security question
Why it's wrong here
Both are knowledge factors, not true MFA.
- ✓
Fingerprint and smart card
Why this is correct
Something you are (fingerprint) + something you have (smart card).
Go deeper
Related to this question
About these practice questions
Courseiva writes every SSCP question from scratch — 920 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.