What is a potential issue with the solution regarding authentication?

• A. It is very expensive to implement.
• B. It completely eliminates the risk of breach.
• C. It will have a high level of false positives.
• D. It requires no user training.

Answer: (C)

Authentication decisions hinge on accurately distinguishing legitimate users from impostors. A common pitfall is a high rate of false positives—where the system accepts someone as authorized who should not be granted access. This can occur if the matching thresholds are too permissive, biometric systems misread samples under less-than-ideal conditions, or risk-based checks aren’t stringent enough. The consequence is a real security risk: unauthorized access slipping through the cracks. To mitigate, tighten the comparison thresholds, implement multi-factor authentication, add liveness checks for biometrics, and monitor for unusual login patterns. While cost, training requirements, or the idea that breaches can be completely prevented may be considerations, the issue highlighted here is the potential for false positives in authentication.