The BEST technique to authenticate to a system is to:

A.
establish biometric access through a secured server or Web site.

B.
ensure the person is authenticated by something he knows and something he has.

C.
maintain correct and accurate ACLs (access control lists) to allow access to applications.

D.
allow access only through user ID and password.

Explanation:
This is a tricky question. Normally, biometrics is the preferred answer as it is a more secure means of
authentication than even multi-factor authentication. However, you would not establish biometric access
through a secured server or Web site. Therefore, the answer must be “Ensure the person is authenticated by
something he knows and something he has”. This is an example of two-factor authentication.
Incorrect Answers:
A: You would not establish biometric access through a secured server or Web site.
C: Maintain correct and accurate ACLs is always a good idea. However, this provides no authentication solution
as required by the question.
D: A user ID and password is single-factor authentication. The user ID and the password are both “something
you