QuestionQ320

Security Fundamentals

An organization protects its network with multi-factor authentication by using an authenticator app on employees' smartphones.

How is the application protected if a user's smartphone is lost or stolen?

  • A The application requires the user to enter a PIN before it provides the second factor
  • B The application requires an administrator password to reactivate after a configured interval
  • C The application verifies that the user is in a specific location before it provides the second factor
  • D The application challenges a user by requiring an administrator password to reactivate when the smartphone is rebooted
Explanation

Authenticator apps are typically secured with a device-local unlock mechanism, such as a PIN, passcode, or biometric check, before the app will display one-time codes or allow use of the second factor. That control helps prevent someone who obtains the phone from immediately using the authenticator. The other choices describe behaviors that are not standard security mechanisms for authenticator apps.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!