This deep dive covers Deep Dive: Multi-Factor Authentication (MFA) within Prevention Methods for GCSE Computer Science. Revise Prevention Methods in 3.6 Fundamentals of Cyber Security for GCSE Computer Science with 19 exam-style questions and 18 flashcards. This topic shows up very often in GCSE exams, so students should be able to explain it clearly, not just recognise the term. It is section 6 of 11 in this topic. Use this deep dive to connect the idea to the wider topic before moving on to questions and flashcards.
Deep Dive: Multi-Factor Authentication (MFA)
MFA requires multiple forms of verification from different categories:
- Something you KNOW:
- Password or PIN
- Security questions
- Pattern/gesture
- Something you HAVE:
- Phone (SMS code or authenticator app)
- Security key/token (e.g., YubiKey)
- Smart card or badge
- Something you ARE:
- Fingerprint
- Face recognition
- Iris or retina scan
- Voice recognition
Why MFA is effective: Even if an attacker steals your password (something you know), they still need your phone (something you have) or fingerprint (something you are). This makes accounts dramatically more secure - most attacks are stopped by MFA.
Practice questions for Prevention Methods
What is the primary purpose of a firewall?
Explain how penetration testing can improve the security of a network.