Discuss EC-Council 112-51 Exam Topic 2 Question 25

Kevin logged into a banking application with his registered credentials and tried to transfer some amount from his account to Flora's account. Before transferring the amount to Flora's account, the application sent an OTP to Kevin's mobile for confirmation.

Which of the following authentication mechanisms is employed by the banking application in the above scenario?

ABiometric authentication

BSmart card authentication

CSingle sign-on (SSO) authentication

DTwo-factor authentication

Suggested Answer: D

Two-factor authentication (2FA) is a type of authentication that requires users to provide two or more forms of verification to access an online account. 2FA is a multi-layered security measure designed to prevent hackers from accessing user accounts using stolen or shared credentials. 2FA typically combines something the user knows (such as a password or PIN), something the user has (such as a phone or a token), and/or something the user is (such as a fingerprint or a face scan). In the above scenario, the banking application employs 2FA by asking Kevin to enter his registered credentials (something he knows) and an OTP sent to his mobile (something he has) before transferring the amount to Flora's account. Reference:

Improve Your Cybersecurity with Password MFA - Defense.com

What Is Two-Factor Authentication (2FA)? | Microsoft Security

Selecting Secure Multi-factor Authentication Solutions

Get Premium 112-51 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

30 comments · newest first

Billye 11 months ago

I thought biometric was more common these days?

Floyd 11 months ago

Yup, 2FA is super important for security!

Carlene 11 months ago

Wait, are we sure it's not just a regular login?

Beatriz 12 months ago

Agreed, the OTP is a clear sign of 2FA.

Mari 12 months ago

That's definitely two-factor authentication!

Ciara 1 year ago

I vaguely recall that SSO is more about logging in once for multiple services, so that doesn't fit here. It has to be two-factor authentication.

Samuel 1 year ago

I thought biometric and smart card authentication were more about physical devices, so this must be two-factor authentication, right?

Stephanie 1 year ago

I'm not entirely sure, but I feel like this scenario is similar to practice questions we did on multi-factor authentication.

Freeman 1 year ago

I remember studying about different authentication methods, and I think OTPs are a key part of two-factor authentication.

Novella 1 year ago

Okay, let me break this down step-by-step. The user logs in with their credentials, then the app sends an OTP to their phone for confirmation. That sounds like a two-factor approach to me. I'll go with option D.

Boris 1 year ago

Ah, I see what's going on now. The registered credentials are the first factor, and the OTP sent to the mobile is the second factor. That's classic two-factor authentication. I'm confident I can get this one right.

Latanya 1 year ago

Hmm, I'm a bit unsure here. The question mentions logging in with registered credentials, so I'm not sure if that's considered a separate factor. I'll have to think this through carefully.

Lura 1 year ago

This seems like a straightforward two-factor authentication question. The key is identifying the use of the OTP sent to the user's mobile device.

Cassie 2 years ago

Haha, who even uses smart cards these days? D is the obvious choice here. I guess the bank doesn't want to risk Kevin emptying his account and running off to Hawaii!

Zona 2 years ago

↳ replying to Cassie

D) Two-factor authentication

Carry 2 years ago

↳ replying to Cassie

C) Single sign-on (SSO) authentication

Justa 2 years ago

↳ replying to Cassie

B) Smart card authentication

Nathan 2 years ago

↳ replying to Cassie

A) Biometric authentication

Linsey 2 years ago

I agree, D is the correct answer. Having that extra layer of security with the OTP makes it much safer than the other options.

Keneth 2 years ago

↳ replying to Linsey

User 2: I agree, D is the correct answer. Having that extra layer of security with the OTP makes it much safer than the other options.

Reyes 2 years ago

↳ replying to Linsey

User 1: I think the answer is D) Two-factor authentication.

Jolanda 2 years ago

I believe Biometric authentication could also be a good option for added security.

Heike 2 years ago

I agree with Barbra. Two-factor authentication is the most secure option in this scenario.

Melinda 2 years ago

Definitely D. Two-factor authentication is the way to go for banking apps. That OTP is the second factor after the login credentials.

Iluminada 2 years ago

↳ replying to Melinda

Definitely D. Two-factor authentication is the way to go for banking apps. That OTP is the second factor after the login credentials.

Tegan 2 years ago

↳ replying to Melinda

D) Two-factor authentication

Tuyet 2 years ago

↳ replying to Melinda

C) Single sign-on (SSO) authentication

Jody 2 years ago

↳ replying to Melinda

B) Smart card authentication

Emilio 2 years ago

↳ replying to Melinda

A) Biometric authentication

Barbra 2 years ago

I think the banking application is using Two-factor authentication.

EC-Council 112-51 Exam - Topic 2 Question 25 Discussion