(ISC)2 Certified in Cybersecurity Practice Exam

What is the term for a physical object a user possesses that is used to authenticate their identity?

1. Key Card

2. Identification Badge

3. Token

4. Access Card

The correct answer is: Token

The correct term for a physical object a user possesses that is used to authenticate their identity is "Token." In cybersecurity and identity management, a token refers to a device or object that generates or contains a unique value or code to verify the user's identity. Tokens can be hardware-based, such as key fobs or smartcards, or software-based, like mobile authenticator apps that produce time-limited codes. The key aspect of a token is that it demonstrates possession by the user, forming a critical element in the two-factor authentication process. While the other choices relate to forms of identification or access control, they do not encapsulate the general concept of a token. A key card and access card specifically refer to cards designed to grant access to a restricted area or system, and although an identification badge can serve a similar purpose, it often merely provides identification rather than actively generating a code or signal for authentication. Thus, "Token" is the most appropriate answer as it encompasses the broader context of possession-based authentication within cybersecurity practices.