SANS Assessment of Student Learning Plan (ASLP) Security Awareness Training

Which of the following is an example of two-step verification?

1. A fingerprint scan

2. A one-time code sent via text message to your mobile device

3. Using a password manager

4. A security question

The correct answer is: A one-time code sent via text message to your mobile device

Two-step verification is a security process in which a user provides two different authentication factors to verify their identity. This adds an extra layer of protection, making it harder for unauthorized access to occur. In this context, receiving a one-time code sent via text message to your mobile device exemplifies two-step verification. The first step typically involves entering a username and password (something you know), while the second step requires the user to confirm their identity through the one-time code sent to their mobile device (something you have). This method ensures that even if someone gains access to the password, they would still have to obtain the one-time code to log in successfully. Other options, while they may enhance security, do not illustrate the concept of two-step verification. A fingerprint scan represents a biometric verification method, which can be part of a multi-factor or two-factor setup but is not specifically two-step in the traditional sense. Using a password manager simplifies password management but doesn't inherently involve multiple steps for verification. A security question serves as an additional layer of verification in some contexts but lacks the two-factor aspect, as typically it may just involve knowledge (something you know).