Information Security Principles And Frameworks Practice Test

Ownership as a factor in multifactor authentication means you must prove you possess something physical. A hardware device that generates a code or cryptographic response on demand is a hard authentication token—the classic physical token used to demonstrate you have the device. This token is produced by the device itself and changes over time or per event, which is exactly what shows possession of the hardware. Biometric authentication isn’t an ownership factor but a “something you are” factor. Smart cards are hardware credentials and can serve as possession devices, but the term that emphasizes the generated token from the hardware device is hard authentication token. A security key is a hardware credential as well, but the phrasing here centers on the token generated by the device, which aligns with the hard token concept.