easyMultiple SelectObjective-mapped
SSCP Multifactor Authentication (MFA) Practice Question
Which TWO of the following are examples of multifactor authentication? (Choose two.)
⚠ Common exam trap
The trap is that candidates may mistakenly consider a password and security question (both 'something you know') as MFA, or think an SMS code paired with a password is MFA (the SMS code is a delivery method, not a separate possession factor). Correct MFA requires factors from at least two different categories.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Smart card and PIN
Multifactor authentication (MFA) requires at least two distinct factors from different categories: something you know, something you have, and something you are. Option A (Smart card and PIN) combines 'something you have' (smart card) and 'something you know' (PIN), satisfying MFA. Option E (Fingerprint and smart card) combines 'something you are' (fingerprint) and 'something you have' (smart card), also satisfying MFA. Options B, C, and D either use two factors from the same category or are not valid factor combinations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Smart card and PIN
Why this is correct
Smart card (something you have) and PIN (something you know) are two different factor categories, satisfying MFA.
- ✗
SMS code and password
Why it's wrong here
SMS code and password are both knowledge factors (something you know), so they do not constitute MFA.
- ✗
Password and security question
Why it's wrong here
Password and security question are both knowledge factors, so they are not MFA.
- ✗
Voice recognition and iris scan
Why it's wrong here
Voice recognition and iris scan are both biometric factors (something you are), so they are not MFA.
- ✓
Fingerprint and smart card
Why this is correct
Fingerprint (something you are) and smart card (something you have) are two different factor categories, satisfying MFA.
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.