PCSE Question 55

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 2

  Ans: A. Implementing MFA helps mitigate the risk posed by phishing attacks by adding an additional barrier to unauthorized access to employee credentials.

• 3

  The question is asking how to PROTECT employees credentials, NOT how to best protect against phishing. MFA does that in case a user's credentials is compromised by have 2FV. It's another defense in layer approach.

• Chose D1

  MFA itself doesn't really protect user's credentials from beaing leaked. It makes it harder (or nigh impossible) to log in even if they get leaked but they may still leak. Encrypting emails would be of more help, although in case of phishing email it'd be best to educate users and add some filters that will flag external emails as suspicious.