Confusion of Authentication Factors: A classic trick question is that combining a "password" and a "secret question" does not constitute multi-factor authentication because both are "knowledge factors ...