Which device resembles a credit card and stores authentication information on an embedded processor for authentication?

Which device resembles a credit card and stores authentication information on an embedded processor for authentication?

• A. Security key
• B. Smart cards
• C. One-time password
• D. Passwordless

Answer: (B)

The idea being tested is a hardware card that securely stores credentials and can perform authentication operations right on the device. A smart card fits this perfectly: it is a plastic card with an embedded microprocessor that holds keys, certificates, or other secrets and can run cryptographic routines or a challenge-response protocol when used with a card reader. Because the authentication happens on the card itself, the credentials aren’t exposed to the host system, and a PIN can be used to protect access. This combination of a credit-card form factor and on-card authentication capability is what makes smart cards the correct answer. Some other options describe different aspects of authentication. A security key is a hardware token used to authenticate, often as a small dongle or USB/NFC device, but it isn’t defined by having a card-shaped form factor with an on-card processor. A one-time password is a code, not a device. Passwordless refers to an authentication approach rather than a physical token.

The idea being tested is a hardware card that securely stores credentials and can perform authentication operations right on the device. A smart card fits this perfectly: it is a plastic card with an embedded microprocessor that holds keys, certificates, or other secrets and can run cryptographic routines or a challenge-response protocol when used with a card reader. Because the authentication happens on the card itself, the credentials aren’t exposed to the host system, and a PIN can be used to protect access. This combination of a credit-card form factor and on-card authentication capability is what makes smart cards the correct answer.

Some other options describe different aspects of authentication. A security key is a hardware token used to authenticate, often as a small dongle or USB/NFC device, but it isn’t defined by having a card-shaped form factor with an on-card processor. A one-time password is a code, not a device. Passwordless refers to an authentication approach rather than a physical token.