What best describes multi-factor authentication (MFA)?

What best describes multi-factor authentication (MFA)?

• A. MFA requires a password alone
• B. MFA requires two or more verification methods beyond a password
• C. MFA replaces the need for any password
• D. MFA slows login without improving security

Answer: (B)

Multi-factor authentication adds an extra layer of security by requiring more than one kind of credential to prove who you are. Instead of relying on a password alone, MFA asks for at least two separate verification factors, typically from different categories such as something you know (a password), something you have (a code from an authenticator app or a hardware token), or something you are (a biometric like a fingerprint). This way, even if one factor is compromised, an attacker still needs another factor to gain access. The description that matches this is the one that says you use two or more verification methods beyond a password, because it reflects the requirement for multiple independent factors in addition to your password. A single password doesn’t provide MFA, passwordless methods change the login flow but aren’t what MFA requires, and slowing down login is not a feature of MFA nor is it about security improvement.

Multi-factor authentication adds an extra layer of security by requiring more than one kind of credential to prove who you are. Instead of relying on a password alone, MFA asks for at least two separate verification factors, typically from different categories such as something you know (a password), something you have (a code from an authenticator app or a hardware token), or something you are (a biometric like a fingerprint). This way, even if one factor is compromised, an attacker still needs another factor to gain access.

The description that matches this is the one that says you use two or more verification methods beyond a password, because it reflects the requirement for multiple independent factors in addition to your password. A single password doesn’t provide MFA, passwordless methods change the login flow but aren’t what MFA requires, and slowing down login is not a feature of MFA nor is it about security improvement.