Study. uk . com
  1. Home
  2. All questions
  3. Question 274

CompTIA Security+ study material · question 274 of 611

A login arrives from an unexpected country, so the system prompts for an extra check. Does the geolocation signal count as an authentication factor?

  1. No, fraud indicators may inform risk but do not change the assurance level or substitute for a factor
  2. Yes, provided it is logged
  3. Only at AAL1
  4. Yes, it is a location factor
Show the answer

Answer: A. No, fraud indicators may inform risk but do not change the assurance level or substitute for a factor

Risk signals can trigger additional controls, but NIST is explicit that they are not authentication factors.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 § 2 Authentication Assurance Levels

Challenge yourself on this topic → Study as cards