CISSP – Information Systems Security Architecture Professional (ISSAP) — Question 46

You work as a technician for Trade Well Inc. The company is in the business of share trading. To enhance security, the company wants users to provide a third key (apart from ID and password) to access the company's Web site. Which of the following technologies will you implement to accomplish the task?

Answer options

• A. Smart cards
• B. Key fobs
• C. VPN
• D. Biometrics

Correct answer: B

Explanation

Key fobs are handheld devices that generate a one-time password or provide a secure access token, making them suitable for two-factor authentication alongside ID and password. Smart cards and biometrics are also secure methods but do not typically fit the description of a third key that is easily portable like a key fob. A VPN is not a user authentication method but rather a secure connection method.