Which are common MFA factor categories and examples?

• A. Knowledge (password), Possession (token/phone), and Inherence (biometrics)
• B. Authentication, Authorization, Accounting
• C. Knowledge, Authorization, Attestation
• D. Inherence, Assertion, and Access Control

Answer: (A)

MFA uses three factor categories to verify identity: something you know, something you have, and something you are. A password fits the “something you know” category. A token or a phone used to receive a code or push notification fits the “something you have” category. Biometrics like fingerprint or facial recognition fit the “something you are” category. Together these three categories form the common MFA approach, which is why the option listing Knowledge, Possession, and Inherence with those examples is the best fit.

The other options mix in concepts that aren’t MFA factor categories. Authentication, Authorization, and Accounting is a policy framework (AAA) rather than a description of authentication factors. The remaining choices include terms like Authorization, Attestation, Assertion, or Access Control, which aren’t the standard factor categories used to describe MFA.