Security+ Question of the Week: Authentication System

The correct answer is D.

Biometrics require a formal enrollment process because the person must be physically present at the time the biometric authentication factor is created. It is not possible to create a temporary or one-time-use version of biometric, like what can be done with passwords. Thus, formal enrollment or in-person enrollment is required with biometrics.

A OTP (one time password) token can be sent to someone via a delivery service or left on their desk, thus, in-person formal enrollment is not necessarily required. A smart card as a physical token can be sent to someone via a delivery service or left on their desk, thus, in-person formal enrollment is not necessarily required. However, if the smart card includes a biometric element, then formal enrollment for that biometric element is required. A passphrase is simply a version of a password, thus, in-person formal enrollment is not necessarily required.