Western Governors University (WGU) ITAS2110 D430 Fundamentals of Information Security Practice Exam

Multi-factor authentication (MFA) involves using two or more distinct forms of verification to confirm a user's identity before granting access to a system or application. The correct choice exemplifies this concept by combining something the user knows (a password) with something the user is (a fingerprint scan).

The combination of these two factors enhances security since the successful authentication requires both the knowledge of the password and the physical characteristic of the fingerprint. This two-step process makes it significantly more difficult for unauthorized individuals to gain access, therefore providing a higher level of security than a single-factor method.

In contrast, the option that mentions using a username and password only utilizes a single factor—something you know—making it less secure. The choice that refers to an IP address for location verification is not considered a factor in MFA, as it does not involve user-specific credentials. Lastly, using a security token alone also represents a single factor (something you have), rather than a multi-factor approach, which would require additional verification methods.