What is a key component of Strong Customer Authentication (SCA)?

• A. Multi-factor authentication via SMS codes
• B. Biometric verification
• C. Password complexity requirements
• D. Single sign-on access

Answer: (B)

A key component of Strong Customer Authentication (SCA) is the requirement for two or more independent factors from the following categories: something the user knows (knowledge), something the user possesses (possession), and something inherent to the user (inherence). Biometric verification falls into the "inherence" category, as it relies on unique physical characteristics of the user, such as fingerprints or facial recognition.

While multi-factor authentication via SMS codes can be a secure method, it is not specifically a requirement of SCA, and its effectiveness has raised concerns due to vulnerabilities such as SIM swapping. Password complexity requirements are related to security but do not meet the multi-factor aspect needed for SCA, and single sign-on access does not inherently provide the level of multiple factors necessary to qualify under the SCA guidelines. Therefore, biometric verification aligns closely with the principles of SCA by integrating inherent factors alongside knowledge and possession for secure authentication.