Which statement best describes multi-factor authentication?

• A. Requires additional credentials beyond a password, often combining something you know and something you possess
• B. Uses only a password
• C. Relies exclusively on biometrics
• D. Is identical to single-factor authentication

Answer: (A)

Multi-factor authentication requires more than one credential to verify identity, typically combining something you know with something you have (and sometimes something you are). The best description says it needs additional credentials beyond a password and often pairs a knowledge factor with a possession factor. This captures the core idea: security is strengthened by requiring multiple independent proofs of identity, so even if one factor is compromised, the other factor still protects access. It’s not just a password, and it’s not solely biometrics, which would be a single factor unless another method is added. For example, a password plus a one-time code from a mobile authenticator or hardware token illustrates MFA in action.