(ISC)2 Certified in Cybersecurity Practice Exam

Which of the following is NOT one of the three factors used in authentication?

1. Something you know

2. Something you own

3. Something you can see

4. Something you are

The correct answer is: Something you can see

In the context of authentication, the three recognized factors are: 1. **Something you know**: This factor typically refers to knowledge-based authentication methods, such as passwords or PINs. The user must possess this knowledge to gain access. 2. **Something you own**: This involves possession-based authentication, where the user is required to have a specific item, such as a security token, smart card, or mobile device, to authenticate. 3. **Something you are**: This relates to biometrics, using unique physical characteristics of the user, such as fingerprints, facial recognition, or iris scans, for authentication purposes. "Something you can see" does not correspond to a recognized factor of authentication. Instead, physical characteristics or possession of physical items are the primary elements used in robust authentication methods. Therefore, the assertion that this factor is not among the three main factors used in authentication is accurate, as it does not fit within the established categories.