Which of the following satisfies a two-factor user authentication?

A.
Iris scanning plus fingerprint scanning

B.
Terminal ID plus global positioning system (GPS)

C.
A smart card requiring the user’s PIN

D.
User ID along with password

Explanation:

A smart card addresses what the user has. This is generally used in conjunction with testing what
the user knows, e.g., a keyboard password or personal identification number (PIN). Proving who
the user is usually requires a biometrics method, such as fingerprint, iris scan or voice verification,
to prove biology. This is not a two-factor user authentication, because it proves only who the user
is. A global positioning system (GPS) receiver reports on where the user is. The use of an ID and
password (what the user knows) is a single-factor user authentication.