CybersecurityLesson 3 of 5 in the course Authentication and access control

MFA Factors, Methods, Attacks, and Deployment

5 flashcards · 4 quiz questions · 5 match pairs · 5 fill-in sentences · English

Save course
Lesson progress
0 / 5

Your progress is kept in this browser only.Sign up to save it

Summary

Multi-factor authentication (MFA) adds layers of evidence to the sign-in process. This lesson explains what MFA is, why it matters, and how the main authentication factors work.

Multi-factor authentication is a method that grants access only after a user successfully presents evidence from at least two distinct types of factor. Two-factor authentication (2FA) is a specific form of MFA that uses exactly two types.

All flashcards

What is multi-factor authentication (MFA)?
Authentication requiring evidence from at least two distinct factor categories.
How does two-factor authentication (2FA) relate to MFA?
2FA is a form of MFA that uses exactly two distinct factor categories.
What are the three classic authentication-factor categories?
Something the user knows, something the user has, and something the user is.
What is an MFA fatigue attack?
An attacker sends repeated push-approval requests, hoping the user will approve one.
What is a time-based one-time password (TOTP)?
A code generated using key material in an authenticator app and refreshed over time.

Quiz questions

  1. A user receives repeated unexpected push-approval requests during an attempted account takeover. Which mitigation requires the user to enter a number displayed on the sign-in screen?Answer: Number matching in the authenticator app.
  2. How does an authenticator app typically produce a time-based one-time password (TOTP)?Answer: It uses stored key material to generate a code that refreshes over time.
  3. Which risk is specifically associated with a SIM-swap attack against SMS verification?Answer: An attacker may transfer the victim's phone number to another SIM.
  4. How does a disconnected token commonly provide evidence during sign-in?Answer: It displays a one-time code that the user enters into the sign-in page.

Based on the Wikipedia article Multi-factor authentication, licensed CC BY-SA 4.0. Adapted into a summary, flashcards and quizzes.

More in Cybersecurity

All Cybersecurity lessons
CybersecurityAccess Control: Policies, Models, Physical Systems, and Threats5 flashcards · 5 quiz questions · 4 gamesPlay free →CybersecurityAES: Structure, Round Operations, Security, and Validation5 flashcards · 5 quiz questions · 4 gamesPlay free →CybersecurityDenial-of-Service Attacks: Techniques, Defenses, and Context5 flashcards · 5 quiz questions · 4 gamesPlay free →CybersecurityCryptographic Hashes: Properties, Constructions, and Security Uses5 flashcards · 5 quiz questions · 4 gamesPlay free →CybersecurityThreat Modeling: Methods, Tools, and Applications5 flashcards · 5 quiz questions · 4 gamesPlay free →CybersecurityRole-Based Access Control: Core Rules, Extensions, and Trade-offs5 flashcards · 5 quiz questions · 4 gamesPlay free →