Which authentication practice is being used when an organization requires a photo on a government-issued identification card to validate an in-person…

Authentication is a process of verifying the identity of a user or device that requests access to a

system or resource. Authentication can be based on one or more factors, such as something the user

knows (e.g., password), something the user has (e.g., token), something the user is (e.g., fingerprint)

or something the user does (e.g., signature). When an organization requires a photo on a

government-issued identification card to validate an in-person credit card purchase, it is using

possession factor authentication, which relies on something the user has as proof of identity. The

other options are not applicable in this scenario1, p. 81 Reference: 1: CDPSE Review Manual (Digital

Version)