Which of the following is true of biometrics?

Which of the following is true of biometrics?
A .  It is used for identification in physical controls and it is not used in logical controls.
B .  It is used for authentication in physical controls and for identification in logical controls.
C .  It is used for identification in physical controls and for authentication in logical controls.
D .  Biometrics has not role in logical controls.

View Answer

Answer: C

Explanation: When used in physical control biometric Identification is performed by doing a one to many match. When you submit your biometric template a search is done through a database of templates until the matching one is found. At that point your identity is revealed and if you are a valid employee access is granted.

When used in logical controls the biometric template is used to either confirm or deny someone identity. For example if I access a system and I pretend to be user Nathalie then I would provide my biometric template to confirm that I really am who I pretend to be. Biometric is one of the three authentication factor (somethin you are) that can be use. The other two are something you know and something you have.

Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 38