Which concept requires multiple verification methods for security?

• A. Password Synchronization
• B. Automated Provisioning
• C. Identity Assurance
• D. Multifactor Authentication

Answer: (D)

Multifactor authentication is the concept being tested: access is granted only after presenting two or more verification methods from different categories (something you know, something you have, something you are). This layered approach makes it much harder for an attacker to impersonate a user because stealing one factor (like a password) isn’t enough on its own.

Why this is the best answer: requiring multiple verification methods at login directly addresses strong security through multiple checks. By combining, for example, a password with a one-time code or a biometric factor, you drastically reduce the likelihood that an attacker can gain access even if one factor is compromised. It also protects against common attack vectors like phishing and credential stuffing, since the additional factor is typically outside the password alone.

Why the other ideas don’t fit: password synchronization focuses on keeping the same password across systems for convenience, not on adding multiple verification steps at login. Automated provisioning is about automatically creating or removing user accounts, not about authentication methods. Identity assurance is about evaluating the trust level of a user’s identity and could involve various checks, but it isn’t specifically the requirement to use multiple verification methods at the point of access.