CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following BEST lowers the likelihood of fraudulent activity occurring through the use of a digital wallet?

A Require public key infrastructure (PKI) to authorize transactions.
B Require multi-factor authentication (MFA) to access the digital wallet.
C Use a digital key to encrypt the contents of the wallet.
D Enable audit logging on the digital wallet's device.

Explanation

Multi-factor authentication requires more than one authentication factor to access the wallet, which reduces the chance that a compromised password or single credential can be used for unauthorized access and fraudulent transactions. NIST’s digital identity guidance addresses authentication mechanisms and authenticator assurance for establishing that a claimant is the previously authenticated subscriber.

Learn more

NIST SP 800-63B-4: Digital Identity Guidelines—Authentication and Authenticator Management

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ844

Community Discussion