Types of MFA

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Which MFA method sends a one-time code to your phone number as a text message?

A Security key

B SMS code

2. Which is generally STRONGER than an SMS code?

A A text message sent over the phone network

B An authenticator app that makes codes on your device

3. A fingerprint or face scan is an example of which type of MFA?

A Biometric

B Security key

4. True or false: A physical security key is a small device you plug in or tap to prove it's you.

A True

B False

5. Which MFA type is usually the MOST convenient for a quick unlock on your phone?

A Fingerprint or face scan

B Typing a long code from a security key

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1SMS code		ANever share a code with anyone. Scammers ask for it so they can log in as you. Only type it into the real app or website yourself.
2Authenticator app		BMFA types differ. SMS codes can be intercepted or tricked out of you, while a physical security key is much harder to break.
3A biometric uses part of your body to prove it is you, and it is quick and easy to use.		CA number texted to your phone. It is easy to use, but it can be intercepted or tricked out of you, so it is the weakest of the four.
4A physical security key is a small device you plug in or tap. It is the strongest option, even against fake websites.		DAn app on your device that makes a new code every 30 seconds. It is stronger than SMS because the code is not sent by text.
5A caller says they are from your bank, so you read out your SMS code.		EUSB security key
6All MFA types are equally strong, so an SMS code is as safe as a security key.		FFingerprint or face scan

Definitions

MFA methods

Fill in the Blanks

Complete each line of code by filling in the missing parts.

A text message code is called an ___ code

Code from an _____________ app

Fingerprint and face scan are __________

A USB ________ key is a physical MFA method

SMS codes can be intercepted, so are ______

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A SMS code: made inside an app

B App code: made on your phone

C Key: plug in or tap to log in

Question 2

A type = biometric

B example = security key

C uses = your body

Question 3

A key = physical device

B plug in USB or tap NFC

C phishing_protection = none

Question 4

A SMS: code arrives by text

B App: needs mobile signal

C Both: code expires quickly

Question 5

A login = password + 2nd step

B step = SMS code

C risk = SIM swap can steal it

D fix = use SMS only

Answer Key

Types of MFA

Section A: Quick Questions

B — SMS code

B — An authenticator app that makes codes on your device

A — Biometric

A — True

A — Fingerprint or face scan

Section B: Match the Pairs

SMS code → A number texted to your phone. It is easy to use, but it can be intercepted or tricked out of you, so it is the weakest of the four.

Authenticator app → An app on your device that makes a new code every 30 seconds. It is stronger than SMS because the code is not sent by text.

A biometric uses part of your body to prove it is you, and it is quick and easy to use. → Fingerprint or face scan

A physical security key is a small device you plug in or tap. It is the strongest option, even against fake websites. → USB security key

A caller says they are from your bank, so you read out your SMS code. → Never share a code with anyone. Scammers ask for it so they can log in as you. Only type it into the real app or website yourself.

All MFA types are equally strong, so an SMS code is as safe as a security key. → MFA types differ. SMS codes can be intercepted or tricked out of you, while a physical security key is much harder to break.

Section C: Definitions

MFA methods — Ways to prove it's you: an SMS code, an authenticator app, a biometric like a fingerprint, or a physical security key. They differ in how easy they are to use and how strong they are.

Section D: Fill in the Blanks

A text message code is called an SMS code

Code from an authenticator app

Fingerprint and face scan are biometrics

A USB security key is a physical MFA method

SMS codes can be intercepted, so are weaker

Section E: Spot the Error

A — An SMS code is sent to your phone as a text message. It is an authenticator app that makes codes on your device. It should say: SMS code: sent as a text.

B — A security key is a physical device, not a biometric. A biometric uses your body, such as a fingerprint. It should say: example = fingerprint.

C — Security keys give strong protection against phishing because they only work with the real website. It should say: phishing_protection = strong.

B — An authenticator app makes codes on the device, so it works without mobile signal. SMS needs signal to receive the text. It should say: App: works with no signal.

D — SMS codes can be stolen with a SIM swap, so using SMS only does not fix the risk. A stronger method like an authenticator app or security key does. It should say: fix = use an app or key.