In two-factor authentication, which option describes the required verification factors?

In two-factor authentication, which option describes the required verification factors?

• A. Something you know only
• B. Something you know and something you have
• C. Two devices
• D. A password reset

Answer: (B)

Two-factor authentication works by requiring two separate kinds of proof that you are who you say you are. The strongest description here is proving identity with something you know (like a password) and something you have (like a code from your phone or a hardware security key). Having both a knowledge factor and a possession factor makes it much harder for someone to impersonate you, because they’d need both elements. Using two devices isn’t the same as two different categories of proof, and a password reset isn’t a verification factor at all—it's a recovery action, not authentication.

Two-factor authentication works by requiring two separate kinds of proof that you are who you say you are. The strongest description here is proving identity with something you know (like a password) and something you have (like a code from your phone or a hardware security key). Having both a knowledge factor and a possession factor makes it much harder for someone to impersonate you, because they’d need both elements. Using two devices isn’t the same as two different categories of proof, and a password reset isn’t a verification factor at all—it's a recovery action, not authentication.