CompTIA Cloud+ Practice Test

Which aspect of cloud security involves using two or more methods for user authentication?

1. Identity federation

2. Single sign-on

3. Multifactor authentication

4. Access control lists

The correct answer is: Multifactor authentication

Multifactor authentication is a crucial aspect of cloud security that enhances user authentication by requiring two or more distinct forms of verification before granting access to a system, service, or application. This approach helps to ensure that even if one form of authentication, such as a password, is compromised, unauthorized access can still be prevented as the attacker would also need to provide additional verification methods. Common examples of these methods include something the user knows (like a password), something the user has (like a smartphone or security token), and something the user is (like biometric data). In contrast, identity federation typically refers to the association of user identities from various domains, allowing users to access services across different organizations with a single set of credentials. Single sign-on allows users to authenticate once and gain access to multiple services without the need to log in again to each application. Access control lists manage permissions for users or systems regarding which resources they can access, but they do not specifically focus on the authentication process. Hence, multifactor authentication stands out as the correct answer for combining multiple authentication methods to enhance security.