Question 71

Hard token can be asked of a user for MFA.

In addition to a password, a hard token can be used as a method of multi-factor authentication (MFA). Hard tokens are physical devices that generate a one-time code, providing an additional layer of security beyond just a password.

A) PIN

A PIN (Personal Identification Number) can indeed be a part of multi-factor authentication; however, it is typically considered a second factor rather than a separate entity like a hard token. Therefore, while a PIN can enhance security, it is not what is being asked for in this question.

B) Favorite color

A favorite color does not serve as a secure method for multi-factor authentication. It is not a unique or verifiable piece of information, making it unsuitable for enhancing the security of user accounts.

C) Hard token

Hard tokens are a valid form of MFA as they require users to have a physical device that generates a time-sensitive code. This adds a significant layer of security since it combines something the user knows (the password) with something the user has (the hard token).

D) Mother's maiden name

While a mother's maiden name can sometimes be used as a security question, it is not a reliable form of multi-factor authentication. Such questions can often be easily guessed or researched, making them less secure compared to a hard token.

Conclusion

The correct answer is hard token, as it provides a robust and secure method of multi-factor authentication when combined with a password. Other options either do not meet the criteria for MFA or lack the necessary security features, confirming that only a hard token effectively fulfills the requirements of the question.