WatchGuard Identity Security Essentials
WATCHGUARD IDENTITY SECURITY ESSENTIALS | EXAM
QUESTIONS AND CORRECT ANSWERS | LATEST VERSION
2026/2027
WATCHGUARD IDENTITY SECURITY ESSENTIALS
AuthPoint Multi-Factor Authentication Certification
1. Which statement best describes multi-factor authentication (MFA)?
A. Verifying identity with two or more factors from different categories
B. Using two passwords of different lengths
C. Requiring a password change every 30 days
D. Logging in from two different devices at once
ANSWER : A. Verifying identity with two or more factors from
different categories
MFA combines independent factor types, such as something you know
with something you have, so one stolen factor is not enough.
2. A password and a security question ANSWER together represent
how many distinct factor categories?
A. None
B. Two
C. One
D. Three
ANSWER : C. One
Both are knowledge factors (something you know), so the combination is
still single-factor authentication.
Page 1 of 57
, WatchGuard Identity Security Essentials
3. Which item is an example of a possession factor?
A. A mother's maiden name
B. A fingerprint
C. A registered mobile phone running an authenticator app
D. A PIN
ANSWER : C. A registered mobile phone running an authenticator
app
A possession factor is something the user has, such as a token or an
enrolled phone.
4. A fingerprint scan used to unlock an authenticator app is classified
as which factor type?
A. Inherence
B. Location
C. Possession
D. Knowledge
ANSWER : A. Inherence
Biometric traits like fingerprints are inherence factors, or something you
are.
5. What is the main difference between authentication and
authorization?
A. Authentication confirms who a user is; authorization decides what the
user can access
B. Authentication sets permissions; authorization checks passwords
C. They are two names for the same process
D. Authorization always happens before authentication
ANSWER : A. Authentication confirms who a user is; authorization
decides what the user can access
Identity is proven first, then access rights are evaluated for that verified
identity.
Page 2 of 57
, WatchGuard Identity Security Essentials
6. Which attack uses lists of username and password pairs leaked from
other breaches?
A. Cross-site scripting
B. SQL injection
C. Credential stuffing
D. ARP poisoning
ANSWER : C. Credential stuffing
Credential stuffing relies on password reuse across sites, which MFA
effectively blocks.
7. An attacker floods a user with repeated push requests hoping the
user approves one by mistake. What is this called?
A. Session fixation
B. MFA fatigue (push bombing)
C. Pass-the-hash
D. DNS spoofing
ANSWER : B. MFA fatigue (push bombing)
Push bombing exploits user frustration, which is why number matching
and user awareness matter.
8. Which principle states that users should receive only the access
required to do their job?
A. Defense in depth
B. Least privilege
C. Separation of duties
D. Implicit trust
ANSWER : B. Least privilege
Least privilege limits the damage a compromised account can cause.
Page 3 of 57
, WatchGuard Identity Security Essentials
9. What does the Zero Trust model assume about users inside the
corporate network?
A. Trust is granted permanently after first login
B. No user or device is trusted by default, regardless of location
C. Only VPN users must authenticate
D. Internal users are always trusted
ANSWER : B. No user or device is trusted by default, regardless of
location
Zero Trust requires continuous verification of every access request,
which MFA supports.
10. Single sign-on (SSO) primarily provides which benefit?
A. It removes the need for MFA
B. Users authenticate once to access multiple applications
C. Users never need a password again
D. All applications share one database
ANSWER : B. Users authenticate once to access multiple
applications
SSO reduces repeated logins and password sprawl while a strong identity
provider protects the single entry point.
SECTION B: INTRODUCTION TO WATCHGUARD AUTHPOINT
11. What is WatchGuard AuthPoint?
A. An on-premises firewall appliance
B. An endpoint antivirus product
C. A cloud-based multi-factor authentication service managed in
WatchGuard Cloud
D. A wireless access point
ANSWER : C. A cloud-based multi-factor authentication service
managed in WatchGuard Cloud
AuthPoint delivers MFA as a cloud service, administered through
WatchGuard Cloud.
Page 4 of 57
WATCHGUARD IDENTITY SECURITY ESSENTIALS | EXAM
QUESTIONS AND CORRECT ANSWERS | LATEST VERSION
2026/2027
WATCHGUARD IDENTITY SECURITY ESSENTIALS
AuthPoint Multi-Factor Authentication Certification
1. Which statement best describes multi-factor authentication (MFA)?
A. Verifying identity with two or more factors from different categories
B. Using two passwords of different lengths
C. Requiring a password change every 30 days
D. Logging in from two different devices at once
ANSWER : A. Verifying identity with two or more factors from
different categories
MFA combines independent factor types, such as something you know
with something you have, so one stolen factor is not enough.
2. A password and a security question ANSWER together represent
how many distinct factor categories?
A. None
B. Two
C. One
D. Three
ANSWER : C. One
Both are knowledge factors (something you know), so the combination is
still single-factor authentication.
Page 1 of 57
, WatchGuard Identity Security Essentials
3. Which item is an example of a possession factor?
A. A mother's maiden name
B. A fingerprint
C. A registered mobile phone running an authenticator app
D. A PIN
ANSWER : C. A registered mobile phone running an authenticator
app
A possession factor is something the user has, such as a token or an
enrolled phone.
4. A fingerprint scan used to unlock an authenticator app is classified
as which factor type?
A. Inherence
B. Location
C. Possession
D. Knowledge
ANSWER : A. Inherence
Biometric traits like fingerprints are inherence factors, or something you
are.
5. What is the main difference between authentication and
authorization?
A. Authentication confirms who a user is; authorization decides what the
user can access
B. Authentication sets permissions; authorization checks passwords
C. They are two names for the same process
D. Authorization always happens before authentication
ANSWER : A. Authentication confirms who a user is; authorization
decides what the user can access
Identity is proven first, then access rights are evaluated for that verified
identity.
Page 2 of 57
, WatchGuard Identity Security Essentials
6. Which attack uses lists of username and password pairs leaked from
other breaches?
A. Cross-site scripting
B. SQL injection
C. Credential stuffing
D. ARP poisoning
ANSWER : C. Credential stuffing
Credential stuffing relies on password reuse across sites, which MFA
effectively blocks.
7. An attacker floods a user with repeated push requests hoping the
user approves one by mistake. What is this called?
A. Session fixation
B. MFA fatigue (push bombing)
C. Pass-the-hash
D. DNS spoofing
ANSWER : B. MFA fatigue (push bombing)
Push bombing exploits user frustration, which is why number matching
and user awareness matter.
8. Which principle states that users should receive only the access
required to do their job?
A. Defense in depth
B. Least privilege
C. Separation of duties
D. Implicit trust
ANSWER : B. Least privilege
Least privilege limits the damage a compromised account can cause.
Page 3 of 57
, WatchGuard Identity Security Essentials
9. What does the Zero Trust model assume about users inside the
corporate network?
A. Trust is granted permanently after first login
B. No user or device is trusted by default, regardless of location
C. Only VPN users must authenticate
D. Internal users are always trusted
ANSWER : B. No user or device is trusted by default, regardless of
location
Zero Trust requires continuous verification of every access request,
which MFA supports.
10. Single sign-on (SSO) primarily provides which benefit?
A. It removes the need for MFA
B. Users authenticate once to access multiple applications
C. Users never need a password again
D. All applications share one database
ANSWER : B. Users authenticate once to access multiple
applications
SSO reduces repeated logins and password sprawl while a strong identity
provider protects the single entry point.
SECTION B: INTRODUCTION TO WATCHGUARD AUTHPOINT
11. What is WatchGuard AuthPoint?
A. An on-premises firewall appliance
B. An endpoint antivirus product
C. A cloud-based multi-factor authentication service managed in
WatchGuard Cloud
D. A wireless access point
ANSWER : C. A cloud-based multi-factor authentication service
managed in WatchGuard Cloud
AuthPoint delivers MFA as a cloud service, administered through
WatchGuard Cloud.
Page 4 of 57
