Question 1

What are the three factors of authentication, and what does each represent?

Accepted Answer

Something you know (password/PIN), something you have (token/smart card), and something you are (biometric). Multi-factor authentication (MFA) requires at least two different factors.

Question 2

What is the difference between identification and authentication?

Accepted Answer

Identification is the act of claiming an identity (e.g., entering a username), while authentication is proving that identity is valid (e.g., providing the correct password).

Question 3

What is a False Acceptance Rate (FAR) in biometric authentication?

Accepted Answer

FAR is the rate at which a biometric system incorrectly accepts an unauthorized user. A lower FAR means the system is more secure against impostors.

Question 4

What is the Crossover Error Rate (CER) in biometrics, and why is it significant?

Accepted Answer

CER is the point where the False Acceptance Rate equals the False Rejection Rate. It is used to compare biometric systems—a lower CER indicates a more accurate system.

Question 5

What is a TOTP, and how does it differ from HOTP?

Accepted Answer

TOTP (Time-based One-Time Password) generates codes based on the current time and expires after a short window. HOTP (HMAC-based One-Time Password) generates codes based on a counter and remains valid until used.

Identity & Access Management – CompTIA Security+

Study Modes

Practice Test

Study Guide

Try These Cards

Related Study Decks

CompTIA Security+ Certification — Complete Bundle

CompTIA Security+ Compliance & Governance

CompTIA Security+ Threats & Attacks

Cryptography Basics – CompTIA Security+

Incident Response – CompTIA Security+ Flashcards

Network Security – CompTIA Security+ Certification

Unlock the Full CompTIA Security+ Certification Study Bundle