Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 9 of 318
Free Preview · 318 of 1,059 · questions 1–318 of 1,059 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. MFA A second layer of defense in terms of token or code will be asked to login in to the system
A. MFA A second layer of defense in terms of token or code will be asked to login in to the system
The correct answer is: A. Multifactor authentication (MFA) Explanation: The scenario indicates that unauthorized users were successfully logging in using valid credentials—a classic case of account compromise, likely due to credential theft (e.g., phishing, credential stuffing). Why MFA is the best solution: Multifactor Authentication (MFA) adds an extra layer of security beyond just a username and password. Even if an attacker steals the password, they cannot log in without the second factor (e.g., a one-time code, hardware token, biometric). This would stop unauthorized logins even if the credentials are compromised. Why not the others? B. Permissions assignment Controls what users can access after logging in—it doesn't prevent unauthorized logins. C. Access management A broad term that can include MFA, but on its own, it's too general and doesn't specifically address this attack vector. D. Password complexity Helps reduce guessable passwords, but won’t stop an attacker who already has valid credentials (e.g., from a breach or phishing).