The Cyber Hygiene Notice [FSM-N24] recognises three categories of authentication factor: something you know, something you have, and something you are. Which of the following is an example of a 'something you are' factor?
'Something you are' refers to an inherent biometric characteristic such as a fingerprint. A password/PIN and a security-question answer are both 'something you know', and a hardware token/OTP device is 'something you have'.
Only a biometric is 'something you are'; passwords and security questions are the same 'know' category, and a token is 'have'.
Practise more RES5 Technology Risk & Digital Advisory questions
Exam-style questions with worked answers, then full timed mocks. Free to start.
Build a daily practice habit — a few exam-style questions a day, with worked answers. Free to start.
Start practising →Original study material mapped to the public CMFAS RES5 syllabus. Unofficial, not endorsed by MAS or SCI. Verify figures and rules against current guidance before relying on them.