Two-factor authentication requires two separate verification methods to access accounts. Which combination is typical?

Two-factor authentication requires two separate verification methods to access accounts. Which combination is typical?

• A. A biometric scan alone
• B. Something you know and something you have
• C. A PIN alone
• D. A password only

Answer: (B)

Two-factor authentication relies on two different forms of verification from separate categories, making it much harder for someone to gain access if one factor is compromised. The typical combination is something you know plus something you have. For example, you might enter a password (something you know) and then provide a one-time code from an authenticator app or use a hardware security key or a code sent to your phone (something you have). This mix ensures that even if the password is stolen, the second factor still protects the account. Using a biometric scan by itself isn’t two factors, and a PIN or a password by itself is only one factor. Two factors must come from different categories, such as knowledge plus possession, not two instances of the same type.

Two-factor authentication relies on two different forms of verification from separate categories, making it much harder for someone to gain access if one factor is compromised. The typical combination is something you know plus something you have. For example, you might enter a password (something you know) and then provide a one-time code from an authenticator app or use a hardware security key or a code sent to your phone (something you have). This mix ensures that even if the password is stolen, the second factor still protects the account.

Using a biometric scan by itself isn’t two factors, and a PIN or a password by itself is only one factor. Two factors must come from different categories, such as knowledge plus possession, not two instances of the same type.