https://community.isc2.org/t5/Exams/CC/m-p/77005#M3829 If a company gives you a code to log into their site, would the code be something you have or something you know? Wed, 12 Feb 2025 07:22:25 GMT Igwe 2025-02-12T07:22:25Z https://community.isc2.org/t5/Exams/CC/m-p/77005#M3829 If a company gives you a code to log into their site, would the code be something you have or something you know? Wed, 12 Feb 2025 07:22:25 GMT https://community.isc2.org/t5/Exams/CC/m-p/77005#M3829 Igwe 2025-02-12T07:22:25Z https://community.isc2.org/t5/Exams/CC/m-p/77053#M3836 <P><SPAN>That would be a password, which is "something you know".&nbsp; &nbsp;</SPAN>Here is a reference:&nbsp; <A href="https://pages.nist.gov/800-63-3/sp800-63b.html#sec8:~:text=8.1%20Authenticator%20Threats" target="_blank" rel="noopener">NIST 800-63b, section 8.1</A></P><P>&nbsp;</P><P>Incidentally, a password, is always&nbsp;<SPAN>"something you know", even you randomly generate it and store it in a password manager.</SPAN></P> Wed, 12 Feb 2025 23:35:58 GMT https://community.isc2.org/t5/Exams/CC/m-p/77053#M3836 denbesten 2025-02-12T23:35:58Z