CISSP – Information Systems Security Architecture Professional (ISSAP) — Question 12

Adam works as a Security Analyst for Umbrella Inc. CEO of the company ordered him to implement two-factor authentication for the employees to access their networks. He has told him that he would like to use some type of hardware device in tandem with a security or identifying pin number. Adam decides to implement smart cards but they are not cost effective. Which of the following types of hardware devices will Adam use to implement two-factor authentication?

Answer options

• A. Biometric device
• B. One Time Password
• C. Proximity cards
• D. Security token

Correct answer: D

Explanation

The correct answer is D, Security token, as it serves as a hardware device that generates a code used alongside a PIN for two-factor authentication. Option A, Biometric device, refers to fingerprint or facial recognition technology but does not involve a PIN. Option B, One Time Password, is a method of generating a unique code but does not imply the use of a physical device. Option C, Proximity cards, are used for access control but do not provide the same level of two-factor authentication as a security token.