CompTIA Cloud+ Practice Test

What type of authentication involves using temporary numerical tokens for access?

1. Multifactor

2. Mandatory access control

3. Roles

4. Nondiscretionary

The correct answer is: Multifactor

The choice of multifactor authentication is appropriate in this context because it specifically utilizes multiple methods or factors to verify an identity. Temporary numerical tokens are often generated through mechanisms such as one-time passwords (OTPs) or time-based one-time passwords (TOTP). These tokens add an additional layer of security beyond just a password or PIN, requiring users to provide something they have (the token) in conjunction with something they know (like a password). This method enhances security significantly because even if an attacker intercepts a user's password, they would still need the temporary token to gain access. Multifactor authentication is widely recognized as a best practice for secure access control, particularly in environments that require stringent security measures. Other options, while they have their own contexts in access control, do not specifically refer to the use of temporary tokens for authentication. Mandatory access control relates to security policies that are predefined by a central authority, roles pertain to assigned permissions based on job functions, and nondiscretionary access control involves restrictions based on roles rather than individual user preferences. None of these alternatives encompass the specific use of temporary tokens for authentication in the same way multifactor authentication does.