Which statement correctly describes multi-factor authentication (MFA)?

Which statement correctly describes multi-factor authentication (MFA)?

• A. It is a password alone
• B. It uses a single credential type
• C. It uses at least two credential types
• D. It stores credentials in plain text

Answer: (C)

Multi-factor authentication requires presenting more than one form of evidence to prove your identity. Instead of relying on a single credential, MFA combines two or more independent factors such as something you know (a password), something you have (a code from an authenticator app or a hardware token), and/or something you are (a biometric). The description that MFA uses at least two credential types captures this idea and explains why it strengthens security: if one factor is compromised, another is still needed to gain access. A password alone does not meet MFA, and using a single credential type contradicts the purpose of MFA. Storing credentials in plain text is a security flaw, not a description of how MFA works. For example, signing in with a password plus a one-time code from your phone or a hardware key illustrates MFA in action.

Multi-factor authentication requires presenting more than one form of evidence to prove your identity. Instead of relying on a single credential, MFA combines two or more independent factors such as something you know (a password), something you have (a code from an authenticator app or a hardware token), and/or something you are (a biometric). The description that MFA uses at least two credential types captures this idea and explains why it strengthens security: if one factor is compromised, another is still needed to gain access. A password alone does not meet MFA, and using a single credential type contradicts the purpose of MFA. Storing credentials in plain text is a security flaw, not a description of how MFA works. For example, signing in with a password plus a one-time code from your phone or a hardware key illustrates MFA in action.