問題文
A team is adding a second factor to their login process. Which combination actually constitutes two distinct factors?
選択肢
- A passphrase plus a security question, since the answer is separate from the passphrase and the two are stored in different places by the login service.
- Something the user knows plus something the user has, such as a passphrase together with a code from a device in their possession.
- A passphrase entered twice for confirmation, making the login harder to complete by accident.
- Two passphrases of different lengths, because requiring the user to supply two independent secrets means that an attacker who learns one of them still cannot complete the login, which is the property that multiple factors are meant to provide.