Which e-authentication level requires multi-factor authentication using a hard token?

• A. Level 1 - no identity proofing
• B. Level 2 - single factor authentication, identity proofing requirements
• C. Level 3 - multi-factor authentication
• D. Level 4 - multi-factor using hard token

Answer: (D)

Understanding how many factors are required and what device is used is the key here. Multi-factor authentication means more than one factor is needed to prove identity, such as something you know (a password) plus something you have (a physical device). A hard token is that physical device that generates a one-time code or cryptographic response, proving you possess it. When a level explicitly requires both multi-factor authentication and a hard token, it provides the strongest assurance because an attacker would need both your password and the physical token to gain access. Other levels might rely on a single factor or use MFA without mandating a hard token, which is easier to compromise in some scenarios. Therefore, the level that requires multi-factor authentication using a hard token is the most secure option.