Which form of authentication is defined by NIST?

• A. Password and username
• B. Thumbprint and PIN
• C. Security questions and password
• D. Email verification and password

Answer: (B)

The correct choice is based on the definition of authentication methods outlined by the National Institute of Standards and Technology (NIST). NIST emphasizes the use of multi-factor authentication (MFA) as a means of enhancing security. In this context, the combination of a thumbprint and a PIN represents both something you have (the thumbprint, which is a biometric factor) and something you know (the PIN, which is a knowledge factor). This pairing enhances the security of authentication processes by requiring multiple forms of verification, thereby significantly reducing the risk of unauthorized access.

The other options consist of methods that typically rely on a single factor or do not combine multiple authentication methods effectively, making them less secure compared to the thumbprint and PIN approach outlined by NIST.