Which elements enable context-aware authentication?

• A. Device posture, location, time, and user attributes.
• B. Password length only.
• C. Biometric checks only.
• D. IP address only.

Answer: (A)

Context-aware authentication works by weighing multiple signals from the user and their device to decide how strong the login check should be. The strongest approach combines device posture, location, time, and user attributes because each adds a piece of context: device posture checks whether the device is secure and managed; location and time help identify unusual or high-risk usage patterns; and user attributes (like role or risk profile) tailor the access decision to the individual. Together these signals enable risk-based authentication rather than relying on a single factor. Relying on password length covers only a knowledge factor and misses the surrounding context; biometric checks focus on who you are but don’t consider where or when the request comes from; and IP address alone captures network origin but doesn’t account for device health or user role, making it an incomplete context signal.