Which security principle does Windows Hello align with?

Which security principle does Windows Hello align with?

• A. Multi-factor authentication
• B. Single-factor authentication
• C. Kerberos authentication
• D. Password vaulting

Answer: (A)

Windows Hello exemplifies multi-factor authentication because it combines two different verification factors: something you have and something you are or know. A device-bound credential is created and stored securely on the device (the something you have: the device/key). To use that credential, you must also verify your identity with a biometric factor (something you are) or a PIN (something you know). This combination means you’re proving two distinct factors, not just a single password, which is the essence of MFA. It’s not Kerberos, which is a network authentication protocol, and it’s not password vaulting, which is about securely storing and autofilling passwords.

Windows Hello exemplifies multi-factor authentication because it combines two different verification factors: something you have and something you are or know. A device-bound credential is created and stored securely on the device (the something you have: the device/key). To use that credential, you must also verify your identity with a biometric factor (something you are) or a PIN (something you know). This combination means you’re proving two distinct factors, not just a single password, which is the essence of MFA. It’s not Kerberos, which is a network authentication protocol, and it’s not password vaulting, which is about securely storing and autofilling passwords.