Multifactor authentication

As explained in Acing the CCNA Exam: Volume 2 Advanced Networking and Security

Multifactor authentication is an identity-verification process that requires authentication factors from multiple categories before granting access.

Multifactor authentication (MFA) verifies identity with authentication factors from multiple categories before granting access. It reduces the risk of account compromise because learning one factor does not provide sufficient access. section 11.3.2

Classify authentication factors by what the user knows, possesses, or physically is:

• Knowledge — something you know, such as a password, PIN, or security question and answer. section 11.3.2
• Possession — something you have, such as an identification badge, smartphone, SMS-enabled phone, or authenticator app. section 11.3.2
• Inherence — something you are, such as a facial, palm, fingerprint, or retinal biometric. section 11.3.2

Recognizing true MFA

A password and PIN do not constitute MFA because both are knowledge factors. Touching an access badge and scanning a fingerprint does qualify because possession and inherence are combined. Likewise, a username/password login followed by an SMS code combines knowledge with possession of the phone. section 11.3.2 section 11.5.2

Use the factor-classification figure to practice mapping authentication methods to knowledge, possession, and inherence. section 11.5.2

How Acing the CCNA Exam: Volume 2 Advanced Networking and Security covers it

How deep it goes

Explains the definition, security rationale, three factor categories, and valid combinations, but stops short of configuration or protocol implementation.

Examples

Uses passwords, PINs, badges, smartphones, SMS codes, authenticator apps, biometrics, badge readers, and fingerprint scans.

What it assumes

Assumes familiarity with user authentication and passwords while defining MFA terminology and factor categories explicitly.

What you can do after

Evaluate authentication methods by classifying factors and determining whether combinations satisfy true MFA.

How it connects

Relates MFA to passwords, biometrics, authentication, digital certificates, and authentication factors.

liveBookmanning.com

Read Acing the CCNA Exam: Volume 2 Advanced Networking and Security on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  ASP.NET Core in Action, 3eMultifactor authentication is authentication that requires evidence from multiple independent credential or verification factors.
• 

  liveBookmanning.com
  Microsoft Azure in ActionMulti-factor authentication (MFA) is an authentication technique that requires two or more independent types of evidence to verify an identity.
• 

  liveBookmanning.com
  Data-Driven CybersecurityAn authentication method requiring two or more independent factors to verify a user's identity.
• 

  liveBookmanning.com
  Software Security for DevelopersMultifactor authentication verifies identity using two or more independent authentication factors.
• 

  liveBookmanning.com
  Grokking Web Application SecurityMultifactor authentication is an authentication technique that requires a user to provide at least two distinct forms of identification.
• 

  liveBookmanning.com
  Azure SecurityMultifactor authentication is an authentication method that requires two or more independent factors to verify an identity.
• 

  liveBookmanning.com
  MongoDB 8.0 in Action, Third EditionMFA, or multifactor authentication, verifies an identity using two or more independent authentication factors.
• 

  liveBookmanning.com
  Amazon Web Services in Action, Third Edition: An in-depth guide to AWSMultifactor authentication is an authentication method that requires evidence from multiple independent credential factors.

Compare how 9 books explain multifactor authentication →

Related concepts

• Microsoft Entra IDused by · Microsoft Entra ID is Microsoft's cloud-based identity and access-management service for authenticating users, applications, and services and controlling their access to resources.
• authentication factoruses · An authentication factor is an independent category of evidence used to verify a subject’s identity during authentication.
• Keycloakused by · Keycloak is an open-source identity and access management platform that provides authentication, authorization, and single sign-on, including support for identity standards and federation.
• passwordless authenticationincludes · Passwordless authentication is an authentication method that verifies a user’s identity without requiring a conventional password.
• one-time codeused by · A one-time code is a temporary authentication credential accepted for a single attempt or operation, or during a limited validity period.
• inherence factoruses · An inherence factor is an authentication factor based on a distinctive biological or behavioral characteristic of the claimant.

This explainer was generated by Manning's knowledge graph from the text of Acing the CCNA Exam: Volume 2 Advanced Networking and Security. The section links point to the parts of the book it draws on.