Which one of the following factors is NOT one on which Authentication is based?

A.
Type 1 Something you know, such as a PIN or password

B.
Type 2 Something you have, such as an ATM card or smart card

C.
Type 3 Something you are (based upon one or more intrinsic physical or behavioral traits), such as a
fingerprint or retina scan

D.
Type 4 Something you are, such as a system administrator or security administrator

Explanation:
Something you are, or authentication by characteristic, is based on a unique physical attribute, not what role
you fulfill.
Incorrect Answers:
A: Something you know, or authentication by knowledge, can be a password, PIN, mother’s maiden name, or
the combination to a lock.
B: Something you have, or authentication by ownership, can be a key, swipe card, access card, or badge.
C: Something you are, or authentication by characteristic, is based on a unique physical attribute, referred to as
biometrics.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 163