Which of the following is a certificate-based authentication method that can be enabled for the Service Portal?

• A. Personal Identity Verification
• B. Common Access Card
• C. Smart Card
• D. Password

Answer: (A)

Certificate-based authentication relies on presenting a digital certificate to prove identity, typically issued by a PKI and stored on a smart card or token. Personal Identity Verification (PIV) is the government standard that uses such certificates for authentication, especially for federal employees and contractors. In the Service Portal, you can enable this form of login by configuring a PIV-based certificate authenticator, allowing users to sign in with the certificate on their PIV card (or compatible token) instead of a password.

Common Access Card and Smart Card describe the hardware devices that can hold certificates, but they are the physical tokens, not the certificate-based authentication method itself. Password is not certificate-based. Thus, the PIV option best represents the certificate-based authentication method that can be enabled for the Service Portal.