Which of the following statements about biometrics is not true?

A.
Users can be authenticated by what they do.

B.
Users can be authenticated by what they are.

C.
Users can be authenticated by what they know.

D.
A biometric system�s accuracy is determined by its crossover error rate (CER).

Explanation:
What a user knows (typically, a password) does not relate to
biometrics. In biometrics, users can be authenticated by what they do (signature or
keystroke dynamics) or by what they are (fingerprint, retinal scan). The crossover
error rate (CER) represents the point at which the false rejection (Type I) rate
equals the false acceptance (Type II) rate. It is the most important measurement
when determining a biometric systems accuracy.