(ISC)2 Certified in Cybersecurity Practice Exam

Which of the following is an example of a "something you are" authentication factor?

1. A credit card presented to a cash machine

2. Your password and PIN

3. A user ID

4. A photograph of your face

The correct answer is: A photograph of your face

"Something you are" authentication factors refer to biometric characteristics that are unique to an individual. This includes fingerprints, facial recognition, voice patterns, and retinal scans. These factors rely on inherent physical traits that define a person and are usually difficult to replicate or forge. In this context, a photograph of your face exemplifies this category because it can be used in facial recognition systems, which authenticate a user based on their unique facial features. This form of authentication leverages the biological traits of an individual, as opposed to external items or information. The other options represent different categories of authentication. Presenting a credit card to a cash machine is an example of "something you have," as it requires possession of a physical object. A password and PIN constitute "something you know," which involves knowledge-based credentials. Lastly, a user ID is also "something you know," serving as a unique identifier that does not inherently provide verification of identity without additional verification methods.