Exam SY0-601 topic 1 question 173 discussion

It's like the google notification, is a MFA -give you push notifications to authenticate and alert you on someone is trying to log in your acount.

Push notifications (B) can work as an authentication method and an alerting mechanism for unauthorized access attempts. Push notifications allow for two-factor authentication (2FA), where a user receives a message on their mobile device that must be confirmed in order to log in to an application or website. If an unauthorized access attempt is made, the system can alert the user via a push notification, allowing the user to take action and confirm whether the access attempt was legitimate or not. This serves as an additional layer of security beyond a username and password, and provides a way for the user to be aware of and prevent potential unauthorized access.

Push notifications are becoming a popular method for authentication. The mechanism works by alerting a user on his/her mobile device that an authentication attempt is being requested on their desktop/laptop or other computing device. Instead (or in addition) of inserting a username and password on the desktop/laptop, the user will confirm their login attempt on the mobile push notification. Once confirmed the user will be able to access the resource they are attempting to use. This method doubles as an alert of fraudulent activity for the owner of the resource in the event that they were not attempting to log on. (See https://doubleoctopus.com/security-wiki/authentication/push-notification-authentication/ for more details).

Push notification services send messages to mobile devices from apps. As an example, if Lisa installs the Facebook app on her smartphone and enables notifications, the Facebook app will send her notifications. Software developers can configure the notifications to appear even if the device is in screen lock mode and even if the app is not running. MDM apps can send notifications to remind users of security settings or let them know if their device complies with security policy requirements.

I don't believe the answer is a push notification. If we read the question carefully, it states that it has to function as an authentication method and as an alert method. A push notification is not necessarily an authentication method; many argue this by saying that the push notification will request authorization or denial. However, that is NOT specified in the wording of the question. The question simply mentions "push notifications," which could be just an alert that someone has logged into your account, which does not fulfill the authentication method. The only thing that serves as both an authentication method and an alert is the One-Time Password (OTP). In all CompTIA texts, the OTP is described as an authentication method (one of the most secure), and it also perfectly fulfills the task of alerting.

Push notifications can work as both an authentication method and an alerting mechanism for unauthorized access attempts. When used for authentication, push notifications are sent to a user's registered device (such as a smartphone) as a second factor for multi-factor authentication (MFA). The user receives the notification and must approve or deny the login attempt. If an unauthorized person attempts to log in, the legitimate user will receive the push notification and can promptly deny the login attempt. This serves as an alerting mechanism to the legitimate user that someone is trying to access their account.

Why not D? isnt it the same things - recieve SMS one time 6 digit pin

Push Notification Authentication enables user authentication by sending a push notification directly to a secure application on the user's device, alerting them that an authentication attempt is taking place. The answer is B

A smart card can work as both an authentication method and an alerting mechanism for unauthorized access attempts. A smart card is a physical card, typically the size of a credit card, that contains a microprocessor and memory. The card can be inserted into a card reader, where it can be used to authenticate the user's identity by requiring a personal identification number (PIN) or password. Additionally, a smart card can also be configured to send a push notification to the user's mobile device whenever an unauthorized access attempt is detected. This can alert the user to the attempt and allow them to take appropriate action to prevent unauthorized access.

What Is an Attestation Service? An attest service, or attestation service, is an independent review of a company's financial statement conducted by a certified public accountant (CPA). The CPA delivers an attestation report with conclusions about the reliability of the data.