CompTIA PenTest+ Practice Test

What is a cognitive password?

1. Verification through biometrics

2. A form of knowledge-based authentication

3. Two-factor authentication method

4. Social engineering technique

The correct answer is: A form of knowledge-based authentication

A cognitive password refers to a form of knowledge-based authentication where users are asked to recall information that is personally significant or memorable to them, often used as a security measure to verify identity. This approach aims to enhance security by requiring users to provide answers that are not easily guessable or found through social engineering techniques. In contrast, verification through biometrics relies on physical characteristics such as fingerprints or facial recognition, which does not involve cognitive processes. Two-factor authentication methods typically combine something the user knows (like a password) with something the user has (like a mobile device for a code), which goes beyond just knowledge-based authentication. Lastly, while social engineering is a method used to manipulate individuals into providing confidential information, it is not a form of authentication. The nature of cognitive passwords is specifically tied to individual knowledge that securely verifies a user's identity.